In this session from the Qualys Cyber Risk Series - Application Security Edition: APIs power the digital experiences that customers and partners increasingly expect, yet their rapid growth and expanding threat landscape pose urgent security challenges that no organization can afford to overlook. In this data-driven presentation, Katie Norton, an industry analyst at IDC, explores the rapidly evolving landscape of API security and why it has become a critical priority for modern organizations. Drawing on IDC research and real-world breach examples, she will highlight the expansive role of APIs in connecting systems, fueling innovation, and shaping user experiences—while also expanding the potential attack surface for malicious actors. She also will examine how emerging trends such as generative AI and AI agents transform the threat landscape by introducing new complexities. Finally, she will underscore the importance of a holistic, end-to-end security strategy—spanning tool convergence, DevSecOps practices, and a robust security culture—to ensure that businesses not only comply with evolving regulations but also thrive in an increasingly connected digital world. Katie Norton Research Manager, DevSecOps & Software Supply Chain IDC

 77      2