Ivan Tsarynny

Ivan Tsarynny is the CEO and Co-Founder of Feroot Security, a recognized leader in AI-driven cybersecurity and governance, risk, and compliance (GRC) solutions that safeguard healthcare organizations' websites and patient portals. In February 2025, he led Feroot's groundbreaking discovery of hidden code in DeepSeek designed to covertly transmit data to China Mobile. Mr. Tsarynny provided testimony before a U.S. Congressional committee on national security risks of data collection by China's big tech sector. He has been featured on CNBC, ABC's Good Morning America, CNN's Anderson Cooper 360, and numerous other programs. His expertise is widely recognized in interviews and cited by publications including The Wall Street Journal, Bloomberg, Associated Press, and many others.

Blog
News & Press
Education Center

Sort by:

Third-party pixels can leak PHI and trigger HIPAA violations. Feroot helps CISOs secure healthcare websites and prevent breaches.

HIPAA Compliance

How Third-Party Pixels Jeopardize HIPAA Compliance on Healthcare Websites

Third-party pixels can leak PHI and trigger HIPAA violations. Feroot helps CISOs secure healthcare websites and prevent breaches.

June 30, 2025

HIPAA Compliance

What Every CISO Needs to Know About HIPAA and Online Tracking Technologies in 2025

HIPAA compliance for tracking technologies is a CISO priority in 2025. Learn how to prevent PHI exposure from pixels, scripts, and web trackers.

June 27, 2025

Client-Side Security

Are Your Web Apps Vulnerable to Infostealers Hiding in Browser Scripts?

Infostealers bypass traditional defenses by targeting browsers. Feroot helps security teams block emerging client-side threats and comply with PCI.

June 25, 2025

Children in a classroom overlaid with the title 'Cybersecurity Gaps in Education: Addressing Risks in Schools and Universities,' highlighting vulnerabilities in school data systems.

Compliance

Cybersecurity Gaps in Education: Addressing Risks in Schools and Universities

TL;DR EdTech platforms and school websites are top targets for cyberattacks. Education ranks among the most targeted sectors for ransomware, phishing, and…

June 25, 2025

Web Application Security

3 Important Things to Know About Cookie Security

TL;DR Cookies can expose sensitive data if not properly secured. Attackers can intercept or manipulate cookies to steal session tokens, credentials, and…

June 25, 2025

Compliance

The 10 Most Costly GDPR Mistakes Banks and Financial Institutions Make

Many banks make GDPR mistakes due to avoidable mistakes in consent, DPIAs, and data flows. Learn how to avoid fines and automate compliance at scale.

June 23, 2025

PCI DSS Compliance

What Payment Page Scenarios Trigger PCI DSS 4.0 Requirements — and How Can CISOs Stay Compliant?

Feroot’s PaymentGuard AI helps CISOs secure PCI DSS 4.0 payment page scenarios by monitoring scripts, detecting risks, and generating reports.

June 20, 2025

Web Application Security

Everything You Need to Know About Web Application Firewalls

Learn how web application firewalls (WAF) can protect your business from client-side attacks and what limitations they might have.

June 18, 2025

pci dss 6 4 3

PCI DSS Compliance

Ensuring PCI DSS 4.0 Compliance: A Deep Dive into Requirement 6.4.3

TL;DR PCI DSS 4.0 Requirement 6.4.3 mandates strict controls over scripts that run on payment pages. It aims to stop client-side attacks…

June 18, 2025