**_We Raised $20 Million_** _/_ [_Read the Announcement_](https://raven.io/blog/%20raven-raises-20m-seed-round-to-protect-applications-at-runtime-even-without-signatures-or-cves) # Blog Security ### Axios Wasn’t Just Compromised. It Was Weaponized. The malicious Axios releases weren't a smash-and-grab. They were a multi-stage malware campaign using npm's install path as a deployment mechanism. Here's what that means for defenders. [Read more](https://raven.io/blog/axios-wasnt-just-compromised-it-was-weaponized) Security [Read more](https://raven.io/blog/axios-wasnt-just-compromised-it-was-weaponized) Company News Raven secures $20M to stop application exploits at runtime—even without CVEs or signatures—bringing real-time protection inside the application layer. [Read more](https://raven.io/blog/raven-raises-20m-seed-round-to-protect-applications-at-runtime-even-without-signatures-or-cves) %20DeepDive.png) Security A deep analysis of React2Shell (CVE-2025-55182) RCE in RSC Flight protocol—and why WAF rule patches fail to protect modern React and Next.js apps. [Read more](https://raven.io/blog/the-deepest-research-on-the-react2shell-cve-2025-55182-and-why-your-waf-rule-patch-leaves-you-exposed) .png) Security Learn why true reachability means detecting executed vulnerable code, not just used libraries, and how this shift cuts SCA noise by 97%. [Read more](https://raven.io/blog/reachability-re-imagined) .png) Product Learn how to debug eBPF verifier errors, manage instruction count limits, and optimize your eBPF programs for performance and safety. Discover practical tips on tail calls, maps, helper functions, and measuring instruction counts effectively. [Read more](https://raven.io/blog/debugging-ebpf-verifier-best-practices-for-high-performance-kernel-programming) .png) Security Discover why static code analysis falls short for dynamic languages like Python, JavaScript, and Ruby. [Read more](https://raven.io/blog/why-static-analysis-falls-short-in-dynamic-programming-languages) Product Most tools treat your app as a black box. Raven Runtime ADR delivers full-stack visibility to detect and stop exploits before they execute. [Read more](https://raven.io/blog/the-need-for-runtime-adr-if-your-app-is-a-black-box-your-security-strategy-is-too) Security Phishing has evolved. Learn how attackers now exploit trusted developer tools, third-party integrations, and CI/CD pipelines to infiltrate cloud environments through sophisticated supply chain attacks. [Read more](https://raven.io/blog/next-gen-phishing-for-developers-the-rise-of-supply-chain-attacks-and-third-party-exploits-in-cloud-security) Security Discover how Kubernetes libraries transition through five distinct security stages—from repository definition to runtime execution—and learn how precise runtime analysis eliminates up to 99% of vulnerability noise. [Read more](https://raven.io/blog/if-it-doesnt-execute-ignore-it) Security Cloud infrastructure CVE triaging has evolved, but AppSec teams still struggle with noisy, irrelevant alerts. Learn how Raven fixes that! [Read more](https://raven.io/blog/why-its-so-hard-to-triage-application-vulnerabilities) Security Discover the crucial distinctions between application security and product security. [Read more](https://raven.io/blog/application-security-vs-product-security) Security Discover the critical differences between static reachability and Raven’s runtime reachability. [Read more](https://raven.io/blog/runtime-reachability-vs-static-reachability) Security Learn to exploit and analyze a Python rpc.py RCE vulnerability using PANDA. [Read more](https://raven.io/blog/analyzing-python-rpc-py-rce-exploit-using-panda-step-by-step) Java’s class loading is a Wonderland of its own! Explore dynamic loading, classpath mysteries, and custom ClassLoaders with a whimsical twist [Read more](https://raven.io/blog/alice-in-java-land-an-adventure-with-loaders-the-classpath-and-whimsical-wisdom) Discover the relationship between vulnerabilities and exploits, how attackers leverage weaknesses, and why not all vulnerabilities are exploitable. [Read more](https://raven.io/blog/understanding-the-relationship-between-vulnerabilities-and-exploits) Security Discover how eBPF revolutionizes runtime application security. [Read more](https://raven.io/blog/ebpf-unleashed-the-future-of-runtime-application-security) Security Attackers are increasingly shifting their focus from infrastructure to applications, exploiting vulnerabilities that traditional security measures cannot protect. [Read more](https://raven.io/blog/7-reasons-why-attackers-shifted-towards-cloud-applications) Security While shift left strategies are essential for building secure applications, they are not sufficient on their own. Cloud runtime application security, or protect right, is crucial especially as attackers are increasingly shifting their focus to applications. [Read more](https://raven.io/blog/the-critical-need-for-cloud-runtime-application-security) .png) Security What CVE-less threats are, why they are becoming more prevalent, and how organizations can protect themselves against these insidious risks. [Read more](https://raven.io/blog/what-are-cve-less-threats)