Protecting Critical Web APIs: Evolution of Attack Vectors & Defense Strategies