This is just business as usual. Wordpress is under attack constantly. One of my blogs has been hacked 5 times this year already.

Of course updating is not enough.

That's why the Obama campaign used Movable Type instead of WP.