Connect with us

TECHNOLOGY

Gas stations and beyond: Why cybersecurity is a top priority for industrial infrastructure

December 19, 2021 1:55 p.m.

By Chris Connell, Managing Director for Asia Pacific at Kaspersky

Industrial Control Systems (ICS) demand specific approaches to cybersecurity due to their complex structure, connected devices with different capabilities, software and operating systems, and critical functions. And this isn’t just a theory. 

Something as common as a gas station has all the attributes of an ICS, such as connected equipment including pumps and tanks, controllers, a management system, a payment system, as well as connection to the corporate network, third-party service systems, and the internet. Just like any industrial facility, it has cybersecurity issues that companies should consider, to avoid disruptions that may affect the business, its employees, and the general public. This happened recently when gas stations in Iran were shut down because of a targeted attack. 

This look through an ICS infrastructure is based on our research carried out at the end of 2020. It included the analysis of a modern gas station’s automation software architecture, a typical infrastructure, and the communications inside it. This allowed us to classify potential attack vectors and their impact on the fuel station’s network. 

At a gas station

Imagine you’re driving your car and you need to fill it. You stop at a gas station, put the dispenser in the tank, and go to the convenience store to pay for the fuel. Once inside, the fresh coffee smells nice, you take some snacks for the road, complete your purchase and return to your vehicle.

To deliver the fuel to your tank, several systems should work: the back-office system and point of sales are used for payments and management functions. They are connected to the forecourt controller (FCC). This is the area with pumps outside the convenience store where customers park their cars to fill up. It is equipped with many systems such as a pump control, an automatic tank gauge (ATG), payment systems, etc. The FCC is the main device that controls fuel distribution, so when you pay through a cashier, the FCC commands the pump to supply it to your car so you can continue your journey. 

Information about operations, the amount of fuel sold and available is transmitted to the management system locally and then to a head office that accumulates information from all stations. 

Where are the problems? 

Through our research, we managed to classify what could go wrong in this process. There are several potential operational technology (OT) and IT security issues that can affect the work of the station. 

The first group of risks involves potential remote access from external networks. Just like many industrial systems today, the gas station employs solutions that are connected to public services through the internet, these include cloud banking systems or specialised fleet management systems. Remote access to the fuel station allows further malicious actions inside the network. 

This was a real case described in one of Kaspersky’s studies. At the gas station, fuel management software was used to track the amount stored, set the price, and process payments. The system was connected to the internet and had vulnerabilities that allowed remote admin access with the ability to even change the fuel price. 

There are also suppliers and service companies that have access to some parts of the infrastructure. Compromising these third parties may open doors to the target system for attackers. In fact, this type of threat is of great concern for companies of any size profile: a third (32%) of large organizations suffered attacks involving data shared with suppliers. What’s more, the financial impact of such incidents on enterprises is the highest across all types of attacks in 2021. 

Another set of risks involves network and device issues that may potentially lead to the disruption of fuel station services or direct financial impact. Attacks can come from remote networks or by connecting to wireless networks or wired network ports available onsite. 

Then, if the network is not segmented, the attack can spread from entry points such as secondary equipment in a shop and office workstations to critical components such as fuel management controls. The usage of unencrypted protocols (HTTP, CDP, FTP, Telnet, etc.) in the gas station network may allow adversaries to disclose sensitive information for further attack development. 

Another critical but evergreen problem is vulnerabilities or security flaws in the fuel controller, POS terminals, and network equipment, as well as corporate endpoints and applications. In 2015, 5,800 automatic tank gauges (ATGs) were found to be exposed to unauthorized access from the internet because of a lack of password protection on a serial port. ATG is an electronic component placed in the tank that monitors the level of fuel and checks if it is leaking fluid. And through this serial port, the ATG can be programmed. If the signal it transfers is not correct, the operator won’t get an alert about any deviation. Figures from 2015 also suggested that at the time, most systems were in gas stations in the US and represented 3% of those used in the country. By compromising such critical systems as automatic tank gauges, criminals can unlock options for fraud or even physical damage. 

It is also important to verify all workstations used on the forecourt such as points of sale, back-office systems, fuel controllers or payment terminals, as well as their configuration and even access to USB ports. For example, a lack of encryption or incompliancy to the PCI DSS standard in a payment system can contribute to the risk of an attack. For a fuel controller, it is also important to check industrial protocols. Lack of source authentication or integrity control may give adversaries, performing a man-in-the-middle attack, the opportunity to intercept data and manipulate station controllers. 

Another point to manage is wireless gateways and reader units. A security assessment should be performed to identify insecure industrial protocols, the possibility of jamming and spoofing attacks. 

How to improve

There are major security measures that should help increase the overall level of operational technology infrastructure. It is applicable to fuel stations but is no less relevant to any industrial network. 

Network security: Purpose-based network segmentation enhances overall security and minimizes the surface of a possible attack. The segment of the network that has access to untrusted parts of it, such as corporate IT, should also be separated and protected with appropriate enterprise-grade protection software. 

Passive OT network monitoring is essential for asset and communication inventory and detection of intrusions before they affect the technological process. Monitoring data also helps IT security teams to analyze events and consider hardening measures. 

Access control: This should include restricting physical and logical access to the automation and control system. Security measures for remote access control for service companies will help to avoid third-party incidents. 

Endpoint protection: It is important to implement specialized industrial-grade security software for OT hosts and servers. Ensure that the software is approved by the automation vendor and compatible with its solutions. This should help to avoid a situation where the protection product affects operation functions. 

Security management: A system for centralized security event collection and protection software policy management should be implemented. It is also important that the solution allows vulnerability and patch management. If the system can be integrated with Security Information and Event Management (SIEM), that is a ‘nice to have’ option for organizations that plan to upgrade their protection level. Real-time continuous monitoring and endpoint data collection with rules-based response and analysis capabilities will help to further improve protection from advanced attacks. 

A more fundamental approach that involves long-term measures is also important to improve the overall cybersecurity posture. This means adhering to industry standards for information security controls such as IEC 62443, NIST, NERC CIP, and so on. The organization should also conduct penetration testing or security analysis regularly, to identify vulnerabilities and information security problems before they are exploited by someone. And then, of course, follow all recommended measures to fix them properly. 

Going deeper, there are specific requirements for companies with different levels of protection. But the measures listed above are essential to fill most cybersecurity gaps. Be it a fuel station, refinery, or giant car manufacturer, the basic principles of OT and IT protection should allow the company to build a reliable cybersecurity system and develop it according to their needs. This will provide a great foundation for satisfied business owners and happy clients. 

TECHNOLOGY

All-new MacBook Neo launches at Power Mac Center

9:22 p.m. April 24, 2026

Premier Apple partner Power Mac Center (PMC) unveiled the all-new MacBook Neo in a fun and vibrant simultaneous launch in Greenbelt 3 and SM Megamall.

Customers who joined the launch received the event exclusive bundle including an AirPods Pro 2 and AirTag 4-pack, stackable with over P12,000 worth of freebies for those with qualified pre-orders. In addition, those in Greenbelt 3 and SM Megamall who lined up until 7PM also got a chance to win up to P600,000 worth of prizes (P300,000 per location).

While attendees were the first to access exclusive perks, PMC is extending its opening promotions over the coming days, ensuring more customers can take part in the excitement.

“We are taking Apple fans on a lifestyle journey worthy of the anticipation for the new MacBook Neo. With every device Power Mac Center launches, we make sure our customers know we stand behind their purchase, helping them choose better, set up faster, and get more out of what they’re upgrading to,” PMC Director for Marketing and Product Management Joey Alvarez.

Mac&Me: Easy to use and easy to own, Made for More

As the premier Apple partner in the Philippines, PMC extends its expertise to support customers, reinforcing how the Mac is made for more than ordinary, with powerful capabilities in completing tasks both for work and play.

Now available in all Power Mac Center stores nationwide, the MacBook Neo is easy to use and easy to own with these exclusive offers. Terms and conditions apply.

  • Accessories: Enjoy up to 50% off on a wide selection of accessories until April 30, 2026. This offer is valid for straight payments only and is available with any MacBook Neo payment option.
  • 1 Infinite: As a limited “double burn” offer (1 point = P2) from PMC’s loyalty program 1 Infinite, members can redeem up to 2,500 points (P5,000 off), with no minimum spend required. This offer is applicable to both device and accessory purchases and is valid from April 23 to 26, 2026 only.
  • UpTrade: Score up to P4,000 in additional trade-in value when you trade in your MacBook Air (M2 or earlier) and upgrade to the all-new MacBook Neo or MacBook Air (M5) from April 23 to May 10, 2026. Offer available at all Power Mac Center stores nationwide.
  • Mobile Care and Basecamp: Customers who purchase the MacBook Neo until April 30, 2026 can also receive a 90-day complementary software fix from Mobile Care Service Center, PMC’s official service arm, and free training for MacBook Neo + AI Toolkit for Beginners provided by Basecamp, PMC’s official training arm.
  • To avail the free training, please register here  <https://docs.google.com/forms/d/e/1FAIpQLSe_z0LeHOubTSrH4guDE7H1gaZICevgaQ15fF0tqxI7CB-aQw/viewform>.
  • Partners: Get special Grab vouchers on purchases of the MacBook Neo until April 24, 2026.
  • Education, SMB, and Enterprise: PMC also offers special Education pricing for students and members of the academe. Meanwhile, businesses and organizations looking to boost their operational efficiency and service delivery can approach any PMC store for a consultation on Apple integration.

Get the best deals with your cards and credit providers

Major bank and non-bank financial institutions offer flexible payment options of up to 36 months installment, 0% interest, Buy Now Pay Later modes, cashbacks, and bonus Power Mac Center Gift Certificates. Do note that these offers are available via in-store purchases only. Check with your financial providers for the full mechanics.

Before completing your purchase, make sure you’re a member of 1 Infinite. To join, download the 1 Infinite app in the App Store <http://bit.ly/4hljdr2> or Google Play <https://bit.ly/42ovsyK> and create an account or log in using your registered email address.

Present your membership when transacting in stores or input details in the Web Store <powermaccenter.com> to earn points, redeem rewards, and enjoy perks from Basecamp and Mobile Care. For full details, visit the site <https://powermaccenter.com/pages/1-infinite>.

Live launch with musical sets and interactive games

The MacBook Neo introduction unfolded as a full launch experience, with performances and interactive activities energizing the crowd before the official unveiling. Headlined by DJs Vernard Tan (in Greenbelt 3) and Ailishia (in Megamall), the shows set the tone for the night designed to engage this generation of tech consumers.

The event was supported by Power Mac Center’s brand partners Belkin, STM, BPI, UnionBank, and Home Credit, as well as Shokz, in partnership with 1 Infinite.

Don’t miss exciting announcements and special promos! Follow the OFFICIAL Power Mac Center accounts on Facebook, Instagram, X, TikTok, Viber, and YouTube.

#PMCExperience #MacMadeForMore

Continue Reading

TECHNOLOGY

Xiaomi Fan Festival 2026 brings April deals across phones, pads, and smart devices

9:30 p.m. April 12, 2026

April is one of the better times this year to look at a Xiaomi upgrade. Xiaomi Fan Festival, the brand’s annual celebration for its fans; is now live in the Philippines under the theme “Smart Living, Made Yours,” running through April 30 at Xiaomi Authorized Stores, participating multi-brand retailers, and Xiaomi community channels.

The campaign spans the full lineup: phones from flagship to entry-level, tablets, wearables, TVs, and more. Most buyers will find at least one clear entry point.

Smartphones

At the top of the range is the Xiaomi 17, priced at ₱55,999 with a free Xiaomi Smart Band 9 Pro. For buyers who want a strong performer without going all the way to the flagship tier, the Xiaomi 15T Pro is available at ₱39,999 with a free Xiaomi Backpack, and the Xiaomi 15T comes in at ₱26,999 down from ₱28,999, with a free Xiaomi Neck Pillow.

The REDMI Note 15 Series covers the mid-range with four variants and a consistent Home Credit angle: shoppers can get an exclusive ₱500 discount per unit on any REDMI Note 15 Series device via Home Credit 0% interest installment plan, and a free month on Viu Premium. The REDMI Note 15 Pro+ 5G is priced at ₱27,999 with a free Xiaomi umbrella, the REDMI Note 15 Pro 5G starts at ₱19,999 with the same freebie, and the REDMI Note 15 5G runs from ₱14,999. At the most accessible end, the REDMI 15 starts at ₱8,999; a practical everyday pick for students and first-time buyers.

Pads

The Xiaomi Pad 8 Pro at ₱38,999 and the Xiaomi Pad 8 at ₱29,999 each come with the keyboard already in the box, plus a free Xiaomi Smart Band 9 Active, boasting a more complete setup from day one, whether the use case is work, school, or content. Both are also available via Home Credit 0% interest installment.

Below those, the REDMI Pad 2 lineup offers three tiers: the REDMI Pad 2 Pro 5G from ₱19,999, the REDMI Pad 2 Pro from ₱15,999, and the REDMI Pad 2 from ₱10,999 which gives students and households a range of screen sizes and specs without stepping into premium territory.

Wearables, TVs, and more

The wearables selection runs wider than the headline picks. The Xiaomi Smart Band 10 is available in Standard (₱2,699) and Ceramic Edition (₱3,799), with the Xiaomi Smart Band 10 Pro at ₱3,899 for buyers who want more. On the more accessible end, the Xiaomi Smart Band 9 Active is ₱1,399, and the REDMI Watch 5 Active comes in at ₱1,899. The REDMI Watch 5 is priced at ₱2,899.

For the living room, the Xiaomi TV A Series starts at ₱8,990 for the 32-inch and ₱12,990 for the 43-inch. Also in the lineup: the REDMI Buds 8 Lite at ₱1,299 and the Xiaomi Power Bank 10000mAh at ₱1,099.

Payment options

The Home Credit ₱500 discount  is applicable to the REDMI Note 15 series while all smartphones and pads will come with 0% interest installment and Viu Premium 1-month voucher offer. That offer runs from April 1 to June 30, 2026; well past the main XFF window, giving you more time to sort out a payment plan before committing. 

The deals listed here cover the main highlighted offers, but the full XFF 2026 lineup is broader. For complete mechanics, freebie eligibility per variant, and model availability, visit your nearest Xiaomi Authorized Store or participating retailer. For the Home Credit discount and installment options, ask at any participating Home Credit hub.

Continue Reading

TECHNOLOGY

Quick Flicks and Pro Clicks: Logitech brings fastest click technology with Latest PRO X2 SUPERSTRIKE 

1:11 p.m. March 26, 2026

Logitech G raises the bar for competitive gaming performance once again with the launch of the PRO X2 SUPERSTRIKE, a next-gen wireless mouse that combines inductive analog sensing with real-time haptics.

Designed for elite precision and total control, the PRO X2 dramatically reduces click latency, enhances responsiveness, and gives players the power to personalize their click intensity like never before.

Industry-Leading Click Technology

Featuring a patent-pending SUPERSTRIKE technology, an industry-first innovation, the PRO X2 transforms how every mouse click is activated and felt. This new technology allows players to reduce the required travel distance to send the click signal. Improvements in click delay are shown to reach up to 30 milliseconds based on internal testing. This drastically transforms the way players compete and provides them the decisive edge they need to win virtual battlefields.

The PRO X2 introduces the Haptic Inductive Trigger System (HITS), which replaces traditional microswitches found in gaming mice. This system drastically improves click latency performance by sending tactile feedback to players so each click is felt the moment the signal reaches the PC.

By combining trigger response optimization with real-time click haptics, Logitech G sets a new benchmark in competitive mouse performance through the PRO X2.

Customizable Esports-Level Gaming Performance 

Developed in collaboration with elite esports teams G2 Esports, NAVi, and BLG, the PRO X2 is made to meet the demands of high-level competitive play. Every element of the mouse is designed to support players in fast decision-making, precise execution, and unmatched consistency, whether competing in a professional environment or grinding ranked matches at home.

Beyond its impressive click system, the PRO X2 also introduces 10 selectable actuation steps, allowing players to fine-tune the actuation point of both main buttons. This level of control enables them to calibrate every click depth to match their preferred playstyle, role, or specific game requirements with zero hassle. These adjustments can be made seamlessly through Logitech G HUB software, giving them the flexibility to edit their settings without disrupting their momentum.

The PRO X2 also features LIGHTSPEED wireless technology that blends comfort and efficiency by delivering up to an 8 kHz report rate of untethered freedom. This end-to-end wireless solution ensures that every click and movement registers with exceptional speed and stability, earning the trust of esports professionals worldwide.

Precision Tracking Without Setbacks

Harnessing Logitech’s elite HERO 2 sensor, the PRO X2 SUPERSTRIKE enables a reliable 888 IPS tracking speed with sub-micron precision, up to 44,000 DPI mouse sensitivity, and over 88G acceleration. For players, this level of control not only supports quick wrist flicks and controlled micro-adjustments but also helps in split-second decisions that require fast reaction. Movements are assured to have zero smoothing, acceleration, or filtering, giving players the chance to showcase their raw and unfiltered skills.

Lightweight Design Built for Long Competitive Sessions

Following the award-winning design of the SUPERLIGHT 2, the PRO X2 weighs 61 grams to support fluid movements and long competitive sessions. Additionally, it comes with a long-lasting battery, reaching up

90 hours of constant use, to allow players to focus on their games without worrying about charge times.

The PRO X2 SUPERSTRIKE sets a new benchmark in player-controlled click innovation that redefines what competitive gaming hardware can deliver. Through Logitech’s advancing technologies, it brings together ultra⁠⁠-responsiveness and absolute control for a reliable wireless virtual performance.

Logitech G’s latest gaming mouse is priced at PHP 11,945 and is available exclusively on Shopee and Logitech Authorized Retail Partners and Gaming Specialists. To learn more about the product and upcoming product releases, follow Logitech G on Facebook. You may also visit http://www.logitechg.com for more product offerings.

Continue Reading