Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy

Unit 42 (July 2026) collection highlights multiple high‑risk research reports. Lead item: “Three Steps to the Terminal” describes three chained zero‑day vulnerabilities in Siemens ROX II OT switches that allow privilege escalation and persistent root access on industrial network switches. Other notable findings in the feed include Vertex AI Python SDK bucket‑squatting enabling cross‑tenant RCE, a universal cloud bucket‑hijacking technique, evolving npm supply‑chain threats (wormable malware, CI/CD persistence), TuxBot v3 IoT botnet built with LLM assistance, Vidar stealer campaigns using Go‑cr