This report examines API attacks affecting banks, payment providers, insurers, investment firms, and other financial organizations. It found that 88.7% experienced an API security incident, with average costs reaching $832,800 in the United States, the highest among the industries surveyed. Leading consequences included increased team stress, regulatory fines, and lost trust. Although 73.5% maintained complete API inventories, only 28.5% knew which APIs returned sensitive data. Network firewalls failing to detect attacks and vulnerabilities within GenAI-related APIs were major causes. Shadow APIs, weak authorization, coding flaws, and unmanaged endpoints also expose account and transaction data. The report recommends continuous API discovery, behavior analysis, secure development, testing,

Join for free to read