Update docs/specification/draft/basic/security_best_practices.mdx

Co-authored-by: Den Delimarsky 🌺 <[email protected]>

Author: SamMorrowDrums

docs/specification/draft/basic/security_best_practices.mdx

@@ -144,7 +144,7 @@ MCP servers **MUST NOT** accept any tokens that were not explicitly issued for t
 
 ### 2.3 Session Hijacking
 
-Session hijacking is when a client is provided a session ID by the server and another client is able to use the same session ID to act on behalf of the original client in some way.
+Session hijacking is an attack vector where a client is provided a session ID by the server, and an unauthorized party is able to obtain and use that same session ID to impersonate the original client and perform unauthorized actions on their behalf.
 
 #### 2.3.1 Session Highjack Prompt Injection