Marina Segal

    Tamnoon / Authors

    Marina Segal.

    CEO & Co-Founder

    Marina is the CEO and co-founder of Tamnoon. A long-time cloud security operator, she focuses on helping CISOs translate cloud risk into measurable, fixable outcomes.

    LinkedIn

    Articles by Marina (14)

    Closing the Cloud Security Remediation Gap with Expert Services
    Cloud SecuritySeptember 9, 2026

    Closing the Cloud Security Remediation Gap with Expert Services

    Cloud security tools often flood teams with alerts, but fixing those issues in production without causing downtime remains a major challenge. Many organizations invest heavily in detection, only to fi…

    Read story
    Safely Fix S3 Bucket Policies Without Breaking Production
    Cloud SecurityAugust 21, 2026

    Safely Fix S3 Bucket Policies Without Breaking Production

    S3 bucket misconfigurations are a constant source of security alerts and operational headaches. Remediation needs to be precise. Changing a bucket policy incorrectly can halt critical applications, le…

    Read story
    Cloud Cyber Threats in 2026 Require Production-Safe Remediation Strategies
    ArticleAugust 5, 2026

    Cloud Cyber Threats in 2026 Require Production-Safe Remediation Strategies

    Cyber threat actors aren't slowing down, and their methods are getting more sophisticated. Organizations must pivot from detection overload to decisive, production-safe remediation to counter these ev…

    Read story
    Closing the Cloud Security Gap From Detection to Rapid Remediation
    Cloud SecurityJuly 24, 2026

    Closing the Cloud Security Gap From Detection to Rapid Remediation

    Automate Remediation to Reduce Cloud Security Alert Backlogs Security teams today are drowning in a sea of alerts, struggling to move beyond detection to swift, production-safe remediation. Organizati…

    Read story
    Unmasking Self-Spreading npm Malware's Elusive Attack Vectors
    Cloud SecurityJune 29, 2026

    Unmasking Self-Spreading npm Malware's Elusive Attack Vectors

    Self-spreading npm malware, like the Shai-Hulud worm, presents a unique challenge for cloud environments. It doesn't just compromise a single package, it weaponizes developer infrastructure to propaga…

    Read story
    Automating Safe Cloud Vulnerability Patching
    Cloud SecurityJune 22, 2026

    Automating Safe Cloud Vulnerability Patching

    Security teams often find themselves drowning in alerts, a situation exacerbated by the sheer volume of vulnerabilities detected in cloud environments. Tools like Wiz, Orca Security, Sentinel One Sing…

    Read story
    Remediating Exposed AWS Credentials on Public Sites
    Cloud SecurityJune 17, 2026

    Remediating Exposed AWS Credentials on Public Sites

    Finding exposed AWS credentials on public websites is a critical incident that demands immediate and precise action. These aren't just theoretical risks. They represent direct attack vectors that thre…

    Read story
    Shrinking Your Remediation Backlog and Conquering CNAPP Alert Fatigue
    Cloud SecurityMay 27, 2026

    Shrinking Your Remediation Backlog and Conquering CNAPP Alert Fatigue

    Cloud security teams drown in alerts. Modern Cloud Native Application Protection Platforms (CNAPPs) like Wiz, Orca Security, and Palo Alto Networks Prisma Cloud excel at finding issues, but the sheer …

    Read story
    Shrinking Your Cloud MTTR for Misconfigurations
    Cloud SecurityApril 11, 2026

    Shrinking Your Cloud MTTR for Misconfigurations

    Shrinking Your Cloud MTTR for Misconfigurations Your CSPM's alert dashboard isn't a to-do list; it's a debt ledger. Each entry represents a window of exposure that grows longer with every passing hour…

    Read story
    Shrinking Your Cloud MTTR for Misconfigurations
    Cloud SecurityApril 3, 2026

    Shrinking Your Cloud MTTR for Misconfigurations

    Shrinking Your Cloud MTTR for Misconfigurations Your cloud security posture management (CSPM) tool works. It generates thousands of alerts, proving its value in detection. Yet, the time it takes to fi…

    Read story
    Reporting Cloud Risk to the Board: From Alerts to Actionable Strategy
    Cloud SecurityMarch 16, 2026

    Reporting Cloud Risk to the Board: From Alerts to Actionable Strategy

    Translate Raw CSPM Alerts into a Risk Narrative Your board doesn’t want the CSV export from Wiz, Prisma Cloud, or Orca Security. They want a story about risk, money, and strategy, and a vulnerability …

    Read story
    CSPM vs. CIEM: Finding the Right Cloud Security Tool for Remediation
    Cloud SecurityMarch 13, 2026

    CSPM vs. CIEM: Finding the Right Cloud Security Tool for Remediation

    Your Scanners Are Working Fine Your Remediation Process Is Broken CSPM and CIEM alerts don't fix themselves. Security teams are equipped with powerful detection tools like Wiz, Prisma Cloud, and Orca …

    Read story
    Cloud AI Security: Why Your CSPM Won't Catch Agent Attacks
    Governance & ComplianceMarch 4, 2026

    Cloud AI Security: Why Your CSPM Won't Catch Agent Attacks

    Cloud AI Security: Why Your CSPM Won't Catch Agent AttacksYour CSPM is blind to your biggest new insider threat: your own AI.For years, cloud security has revolved around infrastructure configuration.…

    Read story
    Cloud Detection Is Topping Out: Why Your IDS Can't Stop Agentic AI Breach Loops
    Cloud SecurityFebruary 25, 2026

    Cloud Detection Is Topping Out: Why Your IDS Can't Stop Agentic AI Breach Loops

    Your cloud detection stack is generating more alerts than ever, yet it’s providing less actual security. Traditional intrusion detection systems (IDS) and even modern Cloud Security Posture Management…

    Read story