Yahoo Notifying People About ‘Forged Cookie’ Attacks

Heads up, Yahoo users: a new breach notification warning may be on the way.

SecurityWatchYahoo is in the process of notifying individuals affected by a previously announced hack involving forged cookies, which allowed an intruder to access people’s accounts without entering a password.

Yahoo in December said its outside forensic experts were investigating a forged cookie attack, which occurred between 2015 and 2016. The investigation connected some of that activity to the state-sponsored actor behind the 2014 theft of at least 500 million Yahoo user accounts disclosed in September.

Source: PC Mag