🧤
Session Hijacking
Threats
Stealing your “logged in” session.
Definition
Session hijacking happens when someone steals your session cookie or token and uses it to act as you.
In plain English
Stealing your “logged in” session.
Why this matters
Why it matters: A stolen session can bypass your password and even MFA.
Example
Example: An attacker steals a session cookie and accesses your account without logging in.