New CISA Warning: Hackers Are Targeting Fuel Tank Monitoring Systems

A U.S. government advisory warns that threat actors have been compromising internet-exposed Automatic Tank Gauge (ATG) systems used to monitor fuel and liquid storage, exploiting issues such as authentication bypass, hardcoded credentials, OS command execution, and SQL injection to gain administrative control and potentially disrupt physical fuel infrastructure. Agencies including CISA, FBI, NSA, DOE and others recommend removing direct internet exposure, strengthening authentication (including MFA), patching devices, increasing monitoring and enforcing vendor security to reduce risk.