In this episode of Building Context, Michael and Chris discuss the common notion that API attacks are hard to execute. Then they get to the reality of just how easy it can be for an attacker to find and exploit vulnerabilities despite your best efforts to secure APIs.
Related resources

Securing APIs: The New Application Attack Surface
Download Securing APIs: The New Application Attack Surface Now

Blog: What Happened in the Experian API leak?

State of API Security Report