• ZDNet, Wednesday, February 15, 2017 4:50 PM

Yahoo is informing some users that their accounts were accessed in 2015 and 2016 by hackers. Hackers apparently gained access without passwords by forging cookies; they were able to do so by stealing Yahoo's source code in an earlier data breach.

"Our outside forensic experts have been investigating the creation of forged cookies that could allow an intruder to access users' accounts without a password," the company said in a notice to some users. "Based on the ongoing investigation, we believe a forged cookie may have been used in 2015 or 2016 to access your account."

Read the whole story at ZDNet »