More than 50% of all recorded CISA exploited vulnerabilities were API-related for the first time, a 30% increase from the year before.