Over 900 automatic tank gauge (ATG) systems at US gas stations are exposed online and vulnerable to attacks. These systems monitor fuel and chemical storage tanks across critical infrastructure.
Automatic tank gauge systems are essential infrastructure components that track inventory levels in storage tanks at gas stations and other facilities. Security researchers discovered that a significant number of these systems lack adequate protection against unauthorized access.
The exposed ATG systems can be reached directly over the internet, creating potential entry points for attackers. Compromised systems could allow bad actors to monitor tank levels, manipulate readings, or disrupt fuel distribution operations.
The vulnerability affects multiple sectors beyond retail gas stations, including chemical storage facilities and other critical infrastructure that relies on ATG technology for operational monitoring.
Gas station operators and facility managers are advised to review their network security configurations, implement access controls, and isolate ATG systems from public internet access. Security patches and firmware updates should be applied where available.
The extent of any active exploitation remains unclear, but the widespread exposure indicates a significant security gap in US energy infrastructure.
The FBI's CJIS Security Policy v6.1 strengthens encryption requirements and vulnerability scanning mandates. Agencies must prepare for updated password, MFA, and identity verification standards ahead of compliance audits.
New research reveals that digital watermarks intended to protect content ownership are being repurposed as surveillance mechanisms to track user behavior and identify individuals across platforms.
Donating or recycling an old laptop is environmentally responsible, but failing to erase your data first can expose personal information to new owners or data recovery specialists.
BigCommerce has alerted merchants to a data breach stemming from compromised Ribon app credentials. Attackers used the stolen access to inject malicious scripts into online stores.