Fuel infrastructure exposure: are OT controls keeping up?

TL;DR: Suspected Iranian hackers breached multiple Automatic Tank Gauges at U.S. gas stations, tampered with display readings, and probed exposed internet-facing systems that were often read only, according to Armis. The risk is not a single flaw but persistent OT exposure, where legacy assets remain discoverable and reachable before defenders can segment, authenticate, or monitor them.

Editorial analysis by NHI Mgmt Group, based on content published by Armis: “AI-Driven Automated Warfare: How the Iranian ATG Hacks Expose the Vulnerabilities of U.S. Critical Infrastructure”.

Key questions

Q: What breaks when OT devices are exposed to the internet?

A: Internet exposure turns HMIs and PLCs into reachable control points rather than protected field assets.

Q: Why do weak credentials and flat networks make OT attacks worse?

A: Weak credentials and flat networks turn a limited compromise into a wider operational risk.

Q: How can security teams tell whether an OT assessment is actually working?

A: An assessment is working when it produces approved, executable remediation plans rather than static reports.

Practitioner guidance

• Map every internet-facing OT asset Create and maintain a live inventory of ATGs and adjacent industrial devices, including ownership, exposure state, and business criticality.
• Remove public internet exposure Place any required remote polling or administration behind a secure VPN gateway and block direct public access to OT devices.
• Eliminate shared or factory credentials Assign unique, complex passwords to every device and prohibit default credentials on any operational technology system.

Bottom line: The article’s main risk is not a single exploit, but the persistent exposure of operational technology that was never meant to be freely discoverable on the internet.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →