Plugging the holes in open banking

This article discusses the security risks introduced by open banking and extensive API use in the Asia-Pacific region, highlights common API vulnerabilities (broken object-level authorization, weak authentication, injection attacks, excessive data exposure), details growing supply-chain risks from third-party providers, and recommends mitigations such as MFA, input validation, API management, periodic testing, and a zero-trust approach to reduce exposure and regulatory risk.