Man in the middle

An attack in which a malicious system inserts itself between two parties that believe they are communicating directly. Sender and recipient think they are talking to each other, but a third party sees (and sometimes modifies) what passes. The main remedy is TLS/HTTPS with validated certificates: it makes the communication encrypted and authenticated, so a man in the middle cannot read or alter the content.