Hackers are increasingly moving past firewalls to target APIs directly, especially those connected to payments, ...