the user name should not be cryptic to you. It should be the database user you have in wordpress/wp-config.php. I would double check wp-config.php to see whether it has valid database account. define(‘DB_USER’)…
btw, which version you upgraded from? Did you wipe clean or did an in-place upgrade?
wordpress blog server is just another LAMP application. Its security depends on all the components and their interactions with each other and with the client. So it is not enough to tie down wordpress.org blog software itself. I wrote a small piece on this topic two weeks back. It is available at <A HREF=”http://www.supportsmb.com/security/secure-lamp/”>http://www.supportsmb.com/security/secure-lamp/</A>
Hope this helps.