A glitch in Auth0 could allow attackers to spoof a legitimate website and collect sensitive information from visitors.

Top router firm TP-Link has lost control of two key top level domains accessed by millions of consumers and small businesses each month. The domains, which are used to configure the company’s routers, have expired and been resold to domain name brokers who are actively seeking buyers. Security experts say the domains are at risk...