Tamnoon / Authors
Idan Perez.
CTO & Co-Founder
Idan is the CTO and co-founder of Tamnoon. He architects the agentic platform that automates safe remediation across AWS, Azure, and GCP, and writes about identity, network, and cloud-native security at scale.
LinkedInArticles by Idan (11)
Mitigating Damage from Non-Human Identity Breaches
Non-human identities are prime targets in cloud breaches, representing an attack vector many organizations struggle to secure effectively. Over the past 18 months, 83% of organizations reported at lea…
Read story
AWS IAM Over-Permissioning Fixes for Robust Security
Over-permissioned AWS IAM roles and users create widespread security exposure. This isn't a theoretical risk. It's a constant operational headache that opens the door to critical incidents. For exampl…
Read story
Unforeseen Disruptions From IAM Access Key Rotation
Rotating IAM access keys might seem like a straightforward security hygiene task, but it often triggers a cascade of unforeseen disruptions. What begins as a routine security measure can quickly devol…
Read story
Fixing Overprivileged IAM Roles in Your Cloud Environment
Overprivileged Identity and Access Management (IAM) roles are a direct route to compromise, expanding an attacker's blast radius immediately after initial access. It's not enough to detect overprovisi…
Read story
Fortifying Critical Infrastructure with Network Segmentation Strategies
Critical infrastructure sectors face escalating cyber threats, making resilient network designs essential. Simply detecting intrusions isn't enough. Isolating compromised segments and limiting lateral…
Read story
Shrinking Your Cloud Blast Radius with Credential Control
Shrinking Your Cloud Blast Radius with Credential Control Credential security in the cloud isn't just about preventing initial access. It's about limiting what an attacker can do once they're in. This…
Read story
IAM Access Key Rotation Failure Points and Downtime Prevention
Rotating IAM access keys might seem like a simple security hygiene task, but its execution often leads to unexpected downtime and operational disruptions. Security teams frequently mandate key rotatio…
Read story
Hardening Entra ID Against Service Principal Hijacks
Your biggest identity risk isn't a user; it's a forgotten script with God-mode permissions. While security teams focus on user-centric threats like MFA bombing, attackers are quietly pivoting to a sof…
Read story
Cloud AI Identity Permissions Your Dark Security Debt
Why AI Identity Permissions are Security Debt You Can't Afford The convergence of cloud infrastructure and AI has introduced a new class of identity, one that often operates with unexamined permission…
Read story
Identity is Your New Perimeter: 10 Attacks Bypassing Modern CSPMs
Your CSPM is generating identity alerts, not stopping identity attacks. Most Cloud Security Posture Management (CSPM) tools are effective at telling you what you already suspect: your IAM posture is a…
Read story
Legacy Network Security is Killing Your Digital Transformation: Why Modern Apps Need Automated Remediation
Legacy Network Security is Killing Your Digital Transformation: Why Modern Apps Need Automated RemediationYour CI/CD pipeline deploys in minutes, but your firewall change ticket takes three weeks. You…
Read story