MitM Attack (Man-in-the-Middle)
Category: science
A cyberattack where a threat actor secretly intercepts and alters communication data passing between two parties.
MitM attacks frequently exploit unencrypted public Wi-Fi networks or compromised network switch routers. Forcing strict HTTPS connections, enforcing HSTS headers, and validating digital certificates via the PKI layer entirely neutralizes the threat of unauthorized packet interception loops.
Common Examples
- Using public untrusted hot-spots leaves remote employees vulnerable to MitM attacks that redirect login request payloads.
- Enforcing encrypted mTLS tunnels between internal database nodes eliminates the risk of packet snoop modifications inside the host cluster.