After the recent WordPress Administration Page attack, my hosting provider sent its customers a link to the WordPress page on securing WordPress sites. It’s an excellent resource if you’re running WordPress and some of the ideas are general enough that they can be used in other environments as well.
If you’ve got a blog or some other permanent Web presence, you should take a look at the page and implement the suggestions that make sense for your situation.