As artificial intelligence reshapes software development and attack vectors alike, APIs stand directly in the crosshairs. Adversaries now leverage AI to automate zero-day discovery, craft sophisticated logic attacks, and mimic legitimate traffic at scale. At the same time, AI models rely heavily on API ecosystems, introducing entirely new data exposure risks. This session examines the dual role of AI in API security: how attackers exploit modern API architectures and how defense teams can deploy AI-driven behavioral analytics to stay ahead. Attendees will walk away with actionable strategies to secure both traditional and AI-integrated APIs against the next generation of automated threats.