Tamnoon / Authors
Ran Nahmias.
Chief Business Officer
Ran is CBO at Tamnoon. A veteran of multiple cybersecurity exits, he focuses on how cloud security programs mature from first deployment to measurable, board-ready remediation outcomes.
LinkedInArticles by Ran (10)
Mastering Terraform CI/CD for Cloud Deployments
Cloud deployments demand consistency and speed, but security often becomes a bottleneck. Integrating Terraform into CI/CD pipelines isn't just about automation. It's about embedding security from the …
Read story
Detecting and Remediating Terraform Drift Before Production Impact
Unmanaged configuration drift in Infrastructure as Code (IaC) environments creates immediate security vulnerabilities and operational instability. When deployed cloud infrastructure diverges from its …
Read story
Closing the Cloud SecOps Talent Gap with Strategic Partnerships
SecOps teams often struggle with an overwhelming volume of security alerts, a common issue stemming from the proliferation of cloud-native tools. This alert fatigue frequently coincides with significa…
Read story
Cloud Security Alert Fatigue Why More Alerts Don't Mean More Security
That queue of unaddressed security alerts on your dashboard? It's growing. Every Monday, the count seems higher, the severity scores more alarming, yet you know chasing the highest-rated findings ofte…
Read story
Cloud Incident Response Playbooks Streamline Security Operations
Why Cloud Incident Response Playbooks Are Non-Negotiable Now Incident response in the cloud isn't just about detection; it's about structured, predictable action. The velocity of cloud attacks and the…
Read story
AI-Driven Attacks: Stabilizing Cloud Environments Against Automated Threats
AI Cyberattacks Demand Automated DefenseYour security team can’t click faster than an attack script. That’s the operational reality as attackers integrate AI to automate reconnaissance, exploit genera…
Read story
Closing Cloud Security Ownership Gaps With Strategic Asset Tagging
Establish a Foundational Tagging Policy Now An untagged cloud asset is a security incident waiting for a victim. Without clear ownership metadata, the thousands of alerts from your CNAPP or CSPM are j…
Read story
Vulnerability Exploitation: The Engine Driving Your Worst Cloud Attacks
Anatomy of an Exploit Chain from CVE to Compromise Your cloud scanner finds a vulnerability in minutes. Attackers can exploit it in hours, but your fix takes weeks. This gap isn't a hypothetical risk;…
Read story
Eliminate Standing Privileges: A CISO's Action Plan
Your backlog of over-permissioned IAM roles isn't a list; it's a liability. The output from your CSPM is clear. Wiz, Prisma Cloud, and Orca have done their job, identifying thousands of IAM roles with…
Read story
Alert Fatigue's Price: Halting Remediation and Boosting Exposure
Quantify the Damage of Ignored Alerts Alert fatigue isn't a theoretical problem; it’s a direct contributor to increased risk and operational drag. When a SecOps team is inundated with notifications, t…
Read story