Over 900 automatic tank gauge (ATG) systems at US gas stations are exposed online and vulnerable to attacks. These systems monitor fuel and chemical storage tanks across critical infrastructure.
Automatic tank gauge systems are essential infrastructure components that track inventory levels in storage tanks at gas stations and other facilities. Security researchers discovered that a significant number of these systems lack adequate protection against unauthorized access.
The exposed ATG systems can be reached directly over the internet, creating potential entry points for attackers. Compromised systems could allow bad actors to monitor tank levels, manipulate readings, or disrupt fuel distribution operations.
The vulnerability affects multiple sectors beyond retail gas stations, including chemical storage facilities and other critical infrastructure that relies on ATG technology for operational monitoring.
Gas station operators and facility managers are advised to review their network security configurations, implement access controls, and isolate ATG systems from public internet access. Security patches and firmware updates should be applied where available.
The extent of any active exploitation remains unclear, but the widespread exposure indicates a significant security gap in US energy infrastructure.
A cross-site request forgery (CSRF) vulnerability in WordPress Core, dubbed 'Click2Shell,' enables attackers to execute PHP code on vulnerable servers. Technical details and working exploits are now public.
The ShinyHunters extortion group took control of the dark web leak site belonging to the prolific Cl0p ransomware gang over the weekend. The attackers set an eight-figure extortion demand pegged at 2.333% of Cl0p's estimated net worth.
The FBI's CJIS Security Policy v6.1 strengthens encryption requirements and vulnerability scanning mandates. Agencies must prepare for updated password, MFA, and identity verification standards ahead of compliance audits.
New research reveals that digital watermarks intended to protect content ownership are being repurposed as surveillance mechanisms to track user behavior and identify individuals across platforms.