Cookie poisoning is the term applied when attackers manipulate or “poison” an otherwise valid cookie sent back to a server. The altered or “hacked” cookie can be used to bypass user security mechanisms on the server and glean personal information for such purposes as identity or trade theft.