Many people assume hotel WiFi is safe – but if you're not using VPN – you're very vulnerable. And even with a VPN connection, if you're infected with malware via a fake ad for a Flash Player update, etc. you'll be completely compromised AND they'll gain access to your corporate network. Always make sure your browser 'lock' is green/solid indicating valid encryption.

“DarkHotel” uses bogus crypto certificates to snare Wi-Fi-connected execs
Malware operators know in advance when targeted fat cats will check in and out.