Matt from WordPress has published a great article on WordPress Security. Read the full aricle: How to Keep WordPress Secure.