OWASP API Security Top 10

The Open Web Application Security Project creates a top 10 security threats for various categories every couple of years, so that companies can take action against them accordingly, including APIs.