CYBERSECURITYTRACKER
Permanent story citation

An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7762

As cited

Copy frozen at (site build).

cloud saas

An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.

A content delivery network (CDN) domain expired and was re-registered by a new owner in July 2025, while thousands of websites and code repositories retained hard-coded references to the old CDN hostnames. The new registrant now controls the infrastructure that these sites attempt to load assets from, creating a potential attack surface.

Why it matters: Website operators and developers relying on the expired CDN domain face supply chain compromise risk if the new owner serves malicious content; practitioners should audit for hard-coded external dependencies and enforce subdomain monitoring.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary