Yahoo! Mail continues to be hacked

In the past few months, Yahoo! Mail continues to report that their account has been compromised.
Regardless of Yahoo! has released two patches for its mail client to fix security vulnerabilities that could lead to hacked user accounts. E- Mail continues to report that their account has been compromised.
Yahoo! User Reports The first attack was sent in January, and hacked accounts were hacked to send mass e-mails to other accounts.
Attacks are usually made by sending a malicious link in an email from a friend, colleague or stranger. Malicious mail is used by intruders as a tool to continue sending e-mails to contacts in their contacts or to all the contacts they've emailed.

But there are cases where email users do not click on any links that are hacked, and they only know when their friends notice that their mail account has sent mail all over the place.
       . Yahoo + AOL = Oath
       . Change Yahoo password
Some milestones related to hacking Yahoo !:
7/1, a hacker named Shahin Ramezany uploaded to YouTube a video showing his hacking of a Yahoo account. Mail by utilizing DOM cross-site scripting in browsers. On the same day, Yahoo! out two hardships, one said is investigating the incident, one that confirmed the flaw on.
8/1, security researchers said the hole was still present and Yahoo! have not patched their product.
11/11, Yahoo! Reported that they patched all browsers.
28/2 and 30/1, two users said their account was attacked in the same way that was reported earlier.
31/1, a known vulnerability in the Yahoo Uploader SWF component is indicated by Bitdefender Labs. Yahoo! said the company fixed the vulnerability and made recommendations to affected users to change their password.
February, 2/2, 1/3 and 4/3, consecutive emails from Yahoo! users. said their account was compromised.
Answering the press on this issue, a Yahoo! spokesperson. "The XSS vulnerabilities have been patched and we continue to actively investigate reports of compromised email accounts. Protect our users and their data. We require users to change their passwords regularly and use unique alphanumeric password combinations for every online site they visit. "