Expired DNS Records Give Scammers Access to University Domains

This breach reveals how poor administrative practices at prestigious institutions can systematically compromise their reputation and expose millions of users to malware and phishing scams. Hundreds of abandoned subdomains across 34+ universities have been hijacked to distribute explicit content and deceptive security warnings, stemming from a critical oversight: site administrators failing to remove CNAME records when decommissioning subdomains. The incident exposes the severe security risks posed by inadequate infrastructure housekeeping in organizations that depend heavily on public trust.