API security issues cost APAC companies more than $1 million