Just read this article linked from Slashdot... http://www.imperva.com/docs/WP_Consu..._Practices.pdf

If you don't already do it, please secure your passwords, and if you can force strict passwords in places like WHM/cPanel.
.