This sort of thing makes me glad I’m using WordPress, though I do recognize that even it has had flaws. Really, though, any platform that seeks to be useful is going to have security issues that have to be worked out. That’s the difficulty of putting software/information “out there” on the internet — anyone can get to it, and the whole world can try to hack you.

When you’re as big as Google, of course someone is going to try to hack you. The temptation for the “little guys”, though, is to think that you’re safe, because nobody would care about you when they could take a hack at the likes of Google or Microsoft. That’s simply untrue, however. According to a July of 2005 report by the Small Business Technology Institute and Symantec, their study of Small Business information security found that 56% of small businesses in the previous year had had a security incident. The more technology businesses adopt, the more open they are to “incidents”. Most of that was due to virues, spyware, etc., but not all of it.
The person that hacked Google’s blog didn’t apparently do much other than post a fake entry with plenty of misspellings. You can see it at the following blog site (Techcrunch), since Google took it down fairly quickly:
Strange Things Afoot at the Google Blog

For people that do use WordPress, whether or not you consider yourself a business, it’s important to make sure that your blog is as secure as possible.  The WordPress.org site has some recommendations in its guide, Hardening WordPress. It’s tough to do, though, if you’re not technically minded. That’s not an excuse, though, for an apathetic attitude toward security. If you can’t handle securing your own site, you should find someone who can, or get someone who already does security to host your site (such as WordPress.com).

It’s only because there are so many vulnerable sites out there that malicious hackers can thrive.