[WTH?] Critical Vulnerabilities in Automated Tank Gauges. This Is Not OK.

A new wave of concern has surfaced around the security of Automated Tank Gauges (ATGs), critical systems that monitor and manage liquid levels in storage tanks at facilities like oil refineries and chemical plants.

These systems are integral to ensuring that everything runs smoothly in some of the most sensitive sectors, but recent findings suggest they are far from secure.

Researchers have uncovered a range of vulnerabilities in ATGs that pose serious risks to critical infrastructure. These flaws could allow cybercriminals to remotely exploit ATGs, manipulate tank data, or even cause physical damage to the tanks and facilities they serve. Worse yet, many of these ATGs are connected to the internet, making them easy targets for bad actors seeking to disrupt industrial processes.

The potential consequences of a cyberattack on ATGs are alarming. Hackers could trigger false alarms, stop fuel distribution, or manipulate readings to overflow tanks—leading to catastrophic environmental and economic damage. In industries where downtime is costly and dangerous, even a brief disruption could have far-reaching consequences.

What makes this more concerning is the lack of urgency in addressing these vulnerabilities. Many ATGs are outdated and were not built with cybersecurity in mind. As the digital landscape evolves, these legacy systems remain unpatched, leaving critical infrastructure wide open to attack.

Protecting these systems is no longer optional—it’s essential. Organizations using ATGs need to assess their security posture immediately and implement strong defensive measures to mitigate risks before it’s too late. As the cyber threat landscape grows, the window to act is closing rapidly.

It starts with becoming aware of the risks. A strong security culture is a critical starting point. 

Story at DarkReading