Microsoft calls zero-day releases ‘never justifiable’ as researcher threatens to drop more

A batch of security and cybercrime stories from The Record (late May 2026): a security researcher published multiple zero-day vulnerabilities to GitHub with working proof‑of‑concepts, prompting Microsoft to condemn such releases as “never justifiable”; cruise operator Carnival confirmed a data breach after an employee account compromise, exposing personal data for nearly 6 million people; a Canadian man received a 33‑year sentence for online sexual coercion of US children; a Chinese‑language fraud gang has registered thousands of spoof domains to target 2026 World Cup fans with phishing/scams;