Yahoo has issued a warning of an attack targeting users of its email service, and is initiating password resets for potentially affected accounts.