Q: Why are enterprises being fined for API security incidents? 

\r\n A: Because regulators are beginning to see what attackers already know: Exposed or misconfigured APIs are prevalent, easy to compromise, and often unprotected. 

\r\n All it takes is one vulnerable API  

\r\n Every time a customer, partner, or vendor engages with your business digitally, there’s an API behind the scenes that’s facilitating a rapid exchange of data — often sensitive data. Today’s attackers know that they don’t always need to engage in complex, multistep schemes to steal your data. Instead, they can bypass the go-between – for example, your applications – and directly target your APIs.

\r\n Does it matter if a 200-page regulatory document explicitly mentions, subtly implies, or vaguely indicates that securing APIs is important? Not really. Because a data breach is a data breach, no matter how or where it was executed.…