OpenAI engineer charged with planting a secret recording device.

This CyberWire-style roundup reports several active cybersecurity incidents: an OpenAI engineer arrested for planting a covert recorder; BeyondTrust patching a critical zero-day (CVE-2026-102764) exploited by the China-linked APT ARMORY CASTLE using SAWFLY webshell and BARECLAW tunneler; a widespread attack that raised temperatures in Danfoss-controlled refrigeration systems spoiling food at up to 350 French supermarkets; zero-click spyware distribution via targeted ads linked to Candiru and Discover-Tech; and Microsoft-led disruption of a major Chinese-language cybercrime marketplace.