Iva – if that was a brand new install, without upgrading, can you email security @ wordpress.org then? I’d love to hear more!

Christopher – MU will follow shortly after 2.5 is released, but I’m not sure about bbpress.