API Security Blunders: Tales from the Cyber Trenches