Account-Takeover

Credential stuffing is an automated attack technique where attackers use previously leaked username and password combinations to attempt login across multiple services. This SECMONS glossary entry explains how credential stuffing works, why password reuse fuels it, and how defenders can detect and mitigate it.

Session Hijacking is an attack technique where an attacker takes control of a valid user session by stealing or predicting session identifiers. This SECMONS glossary entry explains how session hijacking works, common attack methods, real-world impact, and defensive mitigation strategies.