How attackers exploit API vulnerabilities and what you can do about it ...