ATMs linked to IP networks vulnerable to threats, security firm says