Why are top university websites serving porn? It comes down to shoddy housekeeping.

Researchers found hundreds of abandoned university subdomains across at least 34 schools were hijacked after outdated CNAME records were left in place.

Official-looking domains from schools including Berkeley, Columbia, and Washington University in St. Louis were used to serve porn and fake malware-removal scams.

The abuse highlights how poor DNS cleanup can let attackers exploit trusted university domains and boost fraudulent pages in search results.