Facebook Security Threats

Hit F12 (keyboard shortcut for the browser's Developer Tools) while you're signed into Facebook and click on the Console tab. You'll see this -

That's the JavaScript console used by web developers which is usually blank but Facebook inserts a warning  there to alert unsuspecting users who can become victims of a social engineering attack.

As there are multiple ways (self-XSS, clickjacking, sharebaiting, phishing, bad apps, access token theft) that a non-technical Facebook users can be exploited by web scamsters, Facebook documents the ways in which victims can fall prey possibly hoping that they will bother to read it. Instead the explanations can actually teach aspiring hackers how to trap gullible users.

Also see: Facebook embarrassment