Yahoo email patch ineffective, security researchers say