Several tech firms are urging people to change all their passwords after the discovery of a major security flaw.