Google around for 'heartbleed'; it's a pretty stonking bug with a type of encryption used on the web. Discovered yesterday, but apparently sites have been vulnerable since 2011. Key outcome for most people being that their usernames and passwords for affected sites (and any sites that share those passwords) should be considered compromised.
Flickr and Yahoo are two of the sites affected. If you're a customer of either you'll probably want to change your passwords as soon as they announce they've fixed their servers.
To give you an idea of the sale of the problem, TOR is currently recommending that anyone who relies on internet security for their welfare stays offline for the next few days.
If you're resetting passwords, might as well pick a good one...: http://xkcd.com/936/