MRI A.I CyberSecurity Scoring
20/05/2026
Access Monitoring Plan
Access Monitoring Plan
MGM Resorts International has 35.14% more incidents than the average of same-industry companies with at least one recorded incident.
MGM Resorts International has 86.92% more incidents than the average of all companies with at least one recorded incident.
MGM Resorts International reported 2 incidents this year: 1 cyber attacks, 0 ransomware, 0 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.
IHG Hotels & Resorts [LON:IHG, NYSE:IHG (ADRs)] is a global hospitality company, with a purpose to provide True Hospitality for Good. With a family of 21 hotel brands and IHG One Rewards, one of the world's largest hotel loyalty programmes, IHG has over 7,000 open hotels in more than 100 countries, and a development pipeline of over 2,300 properties. Luxury & Lifestyle: Six Senses Hotels Resorts Spas, Regent Hotels & Resorts, InterContinental Hotels & Resorts, Vignette Collection, Kimpton Hotels & Restaurants, Hotel Indigo Premium: Noted Collection, voco hotels, Ruby, HUALUXE Hotels & Resorts, Crowne Plaza Hotels & Resorts, EVEN Hotels Essentials: Holiday Inn Express, Holiday Inn Hotels & Resorts, Garner hotels, avid hotels Suites: Atwell Suites, Staybridge Suites, Holiday Inn Club Vacations, Candlewood Suites Exclusive Partners: Iberostar Beachfront Resorts InterContinental Hotels Group PLC is the Group's holding company and is incorporated and registered in England and Wales. Approximately 400,000 people work across IHG's hotels and corporate offices globally. Visit us online for more about our hotels and reservations and IHG One Rewards. To download the IHG One Rewards app, visit the Apple App or Google Play stores.
Minor Hotels is a global hospitality leader with over 560 hotels and resorts across six continents, a diverse portfolio of F&B businesses and a selection of luxury transportation services. With over four decades of experience, we build stronger brands, foster lasting partnerships, and drive business success by staying focused on what matters most to our guests, team members and partners. Our diverse hotel brands - from the luxury of Anantara and Tivoli to the vibrant style of Avani and nhow - bring our guests to the most desirable hotel and resort destinations around the world. We also own a collection of related hospitality businesses, including luxury residences, private jets, restaurants and bars, spa and wellness, and river cruises and rail journeys. #MinorHotels
Delaware North is a global leader in the hospitality and entertainment industry. The company annually serves more than a half-billion guests across three continents, including at high-profile sports venues, airports, national and state parks, restaurants, resorts, hotels and casinos. Building on more than a century of enduring partnerships and a commitment to local communities and sustainability, Delaware North’s vision is to delight guests by creating the world’s best experiences today while reimagining tomorrow.
Whitbread PLC is the owner of the UK’s favourite hotel chain, Premier Inn, as well as restaurant brands, Beefeater, Brewers Fayre, Table Table, Bar + Block and Cookhouse and Pub. Whitbread employs more than 35,000 people in more than 1,200 Premier Inn hotels and restaurants across the UK and Germany, serving over five million customers every month. At Whitbread we are committed to being a force for good in the communities in which we operate. Our Sustainability programme, ‘Force for Good’ is focused on enabling people to live and work well and is built around three pillars of Opportunity, Community and Responsibility. Whitbread PLC is listed on the London Stock Exchange and is a constituent of the FTSE 100. It is also a member of the FTSE4Good Index.
More than an iconic place to stay, Holiday Inn Hotels are a place to be in the moment–gathered to celebrate with family, laughing with friends, sharing a meal with the team, or just for some well-deserved me-time. No matter the reason you travel, when you’re here, you’re right where you’re meant to be. Book with us and become an IHG One Rewards member.
Welcome to Meliá Hotels International! From Mallorca to the world, our story is an exciting journey that began more than six decades ago and has led us to become one of the largest hotel chains on the planet and the most sustainable in Europe (S&P Global). With more than 400 hotels across the world, our passion for hospitality drives us to deliver unique and memorable experiences through our nine brands: Gran Meliá Hotels & Resorts, ME by Meliá, The Meliá Collection, Paradisus by Meliá, Meliá Hotels & Resorts, ZEL, INNSiDE by Meliá, Sol by Meliá and Affiliated by Meliá. If you are looking for a place where your talent can shine and contribute to a more sustainable future, Meliá Hotels International is your destination. We are a family of more than 45,000 people, where every one of us is a VIP (Very Inspiring People) and we are proud to be a Top Employer in multiple countries. Being part of Meliá is to undertake a journey without borders, because the possibilities for development and learning are endless. Here, we enjoy a passionate and familiar environment, full of opportunities where inspiration will always be with you. Join us and feel like a true VIP!
Established in 1975, ITC Hotels Limited has grown to encompass over 140+ hotels across 90+ destinations, solidifying its presence in the Indian subcontinent ITC Hotels seamlessly blends India’s rich tradition of hospitality with globally benchmarked services, offering a collection of hotels and resorts that reflect the unique culture and ethos of each destination. The group operates under six vibrant brands: ITC Hotels and Mementos in the luxury segment, Storii in the boutique premium segment, Welcomhotel in the upper upscale category, Fortune in the midscale segment, and WelcomHeritage in the heritage leisure space
Hilton Grand Vacations is a global leader in vacation ownership, developing, marketing and operating a portfolio of high-quality, shared-ownership properties in highly desired vacation destinations. Our company also manages and operates innovative club membership programs providing exclusive exchange, leisure travel, and reservation services for our Members. At Hilton Grand Vacations, our culture of hospitality extends to our more than 10,000 Team Members who collectively play an important role in delivering exceptional service, quality accommodations, and memorable travel experiences. That’s why we’ve created a workplace that supports growth, opportunity, work-life balance, and respect throughout our Club affiliated properties, sales centers, and corporate offices around the globe.
We’re adventure seekers. Smile givers. Impact makers. We believe in the power of travel. It broadens horizons for our customers, and for our people too. New places to live, new roles to explore, new communities to join. It’s yours for the taking. We’re TUI, a leading global travel and leisure experience company that makes holiday dreams come true for people around the world. We are one of the world’s leading tourism groups counting 1200 travel agencies and online portals, five airlines with around 130 aircraft, over 400 hotels, 16 cruise liners, digital platforms for tours and activities and most importantly over 60 000 colleagues around the world. What unites us is creating moments that enrich the lives of our 21 million customers. Beside the unforgettable experience we provide our customers, we also believe in the good that tourism can bring and we care deeply about our environmental impact. The TUI Care foundation has projects in over 30 countries worldwide, building on the potential of tourism as a global force for development. The Foundation opens up new perspectives through education and training, empowers local communities to benefit from the success of tourism and engages in the protection of nature and the environment. At TUI we simply say “Let’s TUI it”. For us, that means creating happiness. Tackling challenges every day together, with a positive, can-do attitude, and finding solutions even for the most unexpected situations. Our teams across TUI are just as diverse as our destinations. So whether you have lots of experience or none at all. If you want to work in an office or feel best in the field. No matter if you’re an accomplished tech whizz, an aspiring entertainer, or simply in love with flying. There’s a place for you here.
Latest updates, reports, and threat intel affecting the global network.
MGM Resorts International (NYSE:MGM) is involved in proposed settlements of class action lawsuits related to customer data breaches that...
An FBI agent who investigates cybercrimes told the casino industry Thursday to remain vigilant toward threats coming their way,...
Representatives of Wynn Resorts Ltd. have acknowledged the data breach from its computer system first reported Friday, but have not said...
MGM Resorts International said Thursday that it is still working to resolve issues from a cyberattack as another major resort operation said it was targeted...
February 3, 2025 - $45M MGM Settlement Wraps Up Data Breach Class Action Lawsuit: MGM Resorts International has agreed to pay a $45 million...
FILE – The Las Vegas Monorail passes by MGM Grand, April, 27, 2006, in Las Vegas. A “cybersecurity issue” led to the shutdown of some casino...
MGM Resorts International has started to pay people affected by two major cyber attacks, after wrapping up a $45 million class-action...
The chief technology officer at MGM Resorts International reached out to assist Boyd Gaming Corp. when it suffered a cyberattack publicly...
A teenage male has been arrested for his alleged involvement in the high-profile 2023 cyberattacks on MGM Resorts and Caesars Entertainment.
A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP POST request that supplies arbitrary credentials (e.g., action=dologin&login=<any_value>&pwd=<any_value>), and subsequent privileged endpoints under /php/ajax-main.php and /modules/* do not validate a server-side session. A remote unauthenticated attacker can invoke any administrative action exposed by the configuration module, including reading and modifying user rules, fuel tank gauges, fuel dispensers, relays, cash registers, bank terminals, fuel cards, price and customer displays, cash collection, and pricing rules.
SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/. The vulnerable sink in sub calculate concatenates the unmodified Filter request parameter directly into a LIKE clause of the auxiliary $strsth2 statement and executes it via DBI without bound parameters: my $f = @$filters[0]; $f =~ s/\*/%/g; $strsth2 .= " AND $column LIKE '$f' "; This enables error-based SQL injection (e.g., via EXTRACTVALUE) and full read access to sensitive tables including borrowers (password hashes, 2FA secrets, PII), borrower_password_recovery, api_keys, and sessions. Proof of concept (error-based, single request): GET /cgi-bin/koha/reports/catalogue_out.pl?do_it=1&output=screen&Limit=10&Criteria=branchcode&Filter=x'+AND+EXTRACTVALUE(1,CONCAT(0x7e,VERSION(),0x7c,USER(),0x7c,DATABASE(),0x7e))--+- Cookie: CGISESSID=<LIBRARIAN_SESSION> The response body contains the DBI exception leaking the MariaDB version, database user, client IP, and database name, after which arbitrary data can be paged out using LIMIT n,1 / SUBSTRING(...). The vulnerable sink was introduced in commit 6bb77ae3e4 (2008-07-09); CVE-2015-4633 patched the same class in sibling files but did not generalise the fix to reports/catalogue_out.pl. Fixed in Koha 22.11.38, 24.11.16, 25.05.11, 25.11.05, 26.05.01, and 26.11.00 by replacing the raw concatenation with a parameterised placeholder.
The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to be enabled (disabled by default).
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.