I see DreamHost is reporting a second consecutive day of brute force attacks aimed at WordPress, but affecting all their users.
Is this just an ongoing hangover from those users that didn't fix their vulnerable admin user ID's and pw's last month, or is this attacking a new vulnerability ?