Trefor Davies of Timico has posted on his blog the top 10 security screw ups that his technical team come across. Some of them are amazingly basic like default passwords on WiFi access points.
A timely reminder of what you need to fix to avoid being compromised:-
http://www.trefor.net/?p=147