Shadow IT refers to unauthorized hardware or software used within an organization without the knowledge or approval of the IT department, posing security risks.