What is this Heartbleed bug that everyone is talking about? You can read more about it here.
Until the sites with SSL certificates patch the hole and update their certificates, we are probably better off waiting before rushing to change our site passwords. But, how do you know if a secure site you are using is trustworthy and/or updated? LastPass has provided a page where you can enter a web address and they will check the site for you. You can find that page here.