IDG News: Inside the Russian hack of Yahoo.
(Via RISKS Digest.)
The hack began with a spear-phishing email sent in early 2014 to a Yahoo company employee. It's unclear how many employees were targeted and how many emails were sent, but it only takes one person to click on a link, and it happened.
(Via RISKS Digest.)