APIs under pressure: How AI is rewriting the rules of enterprise security