Facebook has changed and said nothing (again). Take a look at your URL (top box on your screen.) If you see "http" or just "www", instead of "https", you DO NOT have a secure session & can be hacked. Go to Account Settings - Click Security on the left top corner - click Edit next to Secure Browsing, Check box, click Save. FB has automatically set it on the non-secure setting! Do everyone a huge favor, copy & re-post
JP