The Secure flag specifies that a cookie may only be transmitted using HTTPS connections (SSL/TLS encryption) and never sent in clear text. The Secure attribute is meant to protect against man-in-the-middle (MITM) attacks. Note that this flag only protects the confidentiality of the cookie, not its integrity.
Learn more about man-in-the-middle (MITM) attacks.