Assessing Internet-wide Exposure to the SolarWinds Compromise

This Censys blog summarizes Internet-facing SolarWinds Orion exposure observed from mid‑December 2020 through January 31, 2021, reporting 1,524 public Orion hosts (primarily in the U.S.), discussing the SUNBURST backdoor and SUPERNOVA web shell, the Orion API vulnerability CVE‑2020‑10148, and providing indicators, mitigation guidance, and references to FireEye and CISA advisories.