Clever hackers don't even need your password to access your account

Here we go again. 

Yahoo is warning some of its users that hackers may have used forged cookies — small files that websites create to store your information — to log into their accounts, thus gaining access without a password. 

Forging. Cookies. 

The attack, which was originally announced in a security update in December 2016, took place between 2015 and 2016. It's the latest in a series of cybersecurity issues faced by the tech company. 

Yahoo forensic experts have been investigating the creation of forged cookies linked to state-sponsored hackers that "could have enabled an intruder to access our users' accounts without a password."  Read more...