Glossary: Application and Credential Attacks, and AI Risks

cookie

Also written: cookies, session cookie

A small piece of data a browser stores for a site and sends back automatically with every request to that site. It often holds the session token, which is why CSRF works and why a stolen cookie allows session hijacking.