Microsoft calls zero-day releases ‘never justifiable’ as researcher threatens to drop more

A batch of security and cybercrime stories: a researcher published multiple zero-day vulnerabilities with working proof-of-concept code to GitHub and threatened more disclosures, prompting Microsoft to condemn such releases as unjustifiable; Carnival confirmed a data breach after an employee account was compromised and personal information for nearly 6 million people was copied; a Canadian man received a 33-year sentence for coercing US children into sending sexual content; a Chinese-speaking fraud gang registered over 4,300 malicious domains impersonating FIFA and is likely targeting WorldCup