Why are top university websites serving porn? It comes down to shoddy housekeeping.
Summary
The article reveals how hundreds of subdomains across major universities were hijacked to serve porn and malicious content due to poor DNS housekeeping and stale CNAME records. It explains the attacker method, the role of Hazy Hawk, and provides practical remediation steps for organizations to inventory and decommission subdomains to prevent similar breaches.