An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.

AI Summary

A researcher identified that thousands of websites, code repositories, and documentation pages still contain hard-coded references to a CDN domain that was re-registered in July 2025 after the original CDN was decommissioned and its domain allowed to expire. Any site still loading assets from this domain is effectively serving attacker-controlled content to all visitors, representing a widespread passive supply chain compromise.

Read full article → https://thehackernews.com/2026/09/an-abandoned-cdn…

Relevance score: 80.0/100

# More from September 19

1
Cisco warns of max severity ISE zero-day exploited in attacks BleepingComputer
2
Brevo Supply Chain Attack Injects Malware Into 100,000 Websites SecurityWeek
3
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation The Hacker News
4
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone The Hacker News
5
Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents The Hacker News
7
Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root The Hacker News
8
International security agencies warn about North Korean hackers exploiting job seekers to steal crypto, data CyberScoop
9
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2 The Hacker News
10
New Check Point flaw lets hackers execute code with root privileges BleepingComputer