What You Need to Know About Multi-Vector API Attacks