Session hijacking: An attack where an intruder takes over a valid session between a user and a system. The attacker exploits vulnerabilities in the session management, such as weak session IDs or unprotected network traffic, to impersonate the user. Once control is gained, the attacker can perform actions as the authenticated user, potentially leading to unauthorized access to sensitive information or functionality.