Investigative defensive-security report: a remediated MachForm upload-directory misconfiguration on Harvard Business School's library subdomain abused for SEO-poisoning under a trusted .edu domain.