If your blog allows users to register and log into your site then there is a security release for Wordpress 2.8.6. The update corrects two exploits. One is an XSS exploit and the other is a problem with sanitizing uploaded files names.
Read up on the full Wordpress 2.8.6 security release on Wordpress.org.
