Microsoft calls zero-day releases ‘never justifiable’ as researcher threatens to drop more

A set of high-impact security stories: a researcher publicly published proof-of-concept code for multiple Microsoft zero-days on GitHub (Microsoft called such releases unjustifiable); Carnival confirmed a data breach affecting nearly 6 million people after an attacker compromised an employee account and copied personal information; Chinese-speaking fraud actors registered 4,300+ fraudulent domains impersonating FIFA to scam World Cup fans; GCHQ warned of daily Russian attacks spanning seabed infrastructure to cyberspace, targeting subsea cables, pipelines and sanctioned-tech smuggling networks