Responding to the SolarWinds Software Compromise in Industrial Environments

**Executive Summary:** The Dragos advisory details the SolarWinds Orion supply-chain compromise (SUNBURST), where a backdoor in SolarWinds updates potentially granted adversaries long-term, contested access since October 2019 to many enterprise and ICS/OT environments; it highlights that 18,000 customers received the affected software, explains that only a subset show follow-on activity, and provides guidance on identifying compromised instances, host- and network-based hunting, IOCs, incident response steps, and regulatory implications for utilities under NERC CIP.