In short, a few hours ago, a vulnerability in YouTube's comment section was discovered, it is possible to inject HTML scripts posted as comments.

10 minutes ago, a cookie session hijack script was posted on a board, which means any "hacker" could basically steal your YouTube account. I suggest you browse YouTube anonymously for the next few days!

"Please forward this message to your friends." - NOTICE THIS.

-Credits
MaxDamage