Matt from Wordpress has published a great article on Wordpress Security. Read the full aricle: How to Keep WordPress Secure.