Why are top university websites serving porn? It comes down to shoddy housekeeping.

**Executive summary:** Researcher Alex Shakhov found hundreds of hijacked subdomains across at least 34 universities (including berkeley.edu, columbia.edu, and washu.edu) being abused to serve explicit porn and scam pages by exploiting stale CNAME records; the activity is linked to a group tracked as Hazy Hawk and leverages search-result visibility to attract victims.