In this session, we'll cover the unique challenges of securing automotive APIs that Vehicle Security Operations Centers (vSOC) face. We'll discuss how a vSOC differs from a traditional IT SOC and explore specific API-based threats in the automotive world, such as credential stuffing, enumeration attacks, and more. Additionally, we'll address the automotive blind spot and how it can be overcome by correlating API transactions with vehicle behavior for enhanced cybersecurity detection and response.