​Yahoo says 32m user accounts were accessed via cookie forging attack