In announcing the second infiltration, Yahoo revealed that hackers had figured out how to forge the company’s tracking cookies, potentially allowing them to simulate a successful login without knowing the target’s password.