I have also had this problem on one of the sites I configured the Wordfence firewall on yesterday. (will now be checking the others and not doing any more configurations!)
Warnings:
* Publicly accessible config, backup, or log file found: .htaccess
Yesterday I updated to latest version of WordPress and configured the Wordfence firewall.
So I am assuming something in the wordfence update/configuration has caused this?