PCI DSS Compliance
October 13, 2026
Ivan Tsarynny
Ivan Tsarynny is the CEO and Co-Founder of Feroot Security, a recognized leader in AI-driven cybersecurity and governance, risk, and compliance (GRC) solutions that safeguard healthcare organizations' websites and patient portals. In February 2025, he led Feroot's groundbreaking discovery of hidden code in DeepSeek designed to covertly transmit data to China Mobile. Mr. Tsarynny provided testimony before a U.S. Congressional committee on national security risks of data collection by China's big tech sector. He has been featured on CNBC, ABC's Good Morning America, CNN's Anderson Cooper 360, and numerous other programs. His expertise is widely recognized in interviews and cited by publications including The Wall Street Journal, Bloomberg, Associated Press, and many others.
PCI DSS Compliance
October 13, 2026
Agentic AI and PCI DSS: What Happens When AI Agents Reach Checkout?
HIPAA Compliance
How Third-Party Pixels Jeopardize HIPAA Compliance on Healthcare Websites
Third-party pixels can leak PHI and trigger HIPAA violations. Feroot helps CISOs secure healthcare websites and prevent breaches.
June 30, 2025
HIPAA Compliance
What Every CISO Needs to Know About HIPAA and Online Tracking Technologies in 2025
HIPAA compliance for tracking technologies is a CISO priority in 2025. Learn how to prevent PHI exposure from pixels, scripts, and web trackers.
June 27, 2025
Client-Side Security
Are Your Web Apps Vulnerable to Infostealers Hiding in Browser Scripts?
Infostealers bypass traditional defenses by targeting browsers. Feroot helps security teams block emerging client-side threats and comply with PCI.
June 25, 2025
Compliance
Cybersecurity Gaps in Education: Addressing Risks in Schools and Universities
TL;DR EdTech platforms and school websites are top targets for cyberattacks. Education ranks among the most targeted sectors for ransomware, phishing, and…
June 25, 2025
Web Application Security
3 Important Things to Know About Cookie Security
TL;DR Cookies can expose sensitive data if not properly secured. Attackers can intercept or manipulate cookies to steal session tokens, credentials, and…
June 25, 2025
Compliance
The 10 Most Costly GDPR Mistakes Banks and Financial Institutions Make
Many banks make GDPR mistakes due to avoidable mistakes in consent, DPIAs, and data flows. Learn how to avoid fines and automate compliance at scale.
June 23, 2025
PCI DSS Compliance
What Payment Page Scenarios Trigger PCI DSS 4.0 Requirements, and How Can CISOs Stay Compliant?
Feroot’s PaymentGuard AI helps CISOs secure PCI DSS 4.0 payment page scenarios by monitoring scripts, detecting risks, and generating reports.
June 20, 2025
Web Application Security
Everything You Need to Know About Web Application Firewalls
Learn how web application firewalls (WAF) can protect your business from client-side attacks and what limitations they might have.
June 18, 2025
PCI DSS Compliance
Ensuring PCI DSS 4.0 Compliance: A Deep Dive into Requirement 6.4.3
TL;DR PCI DSS 4.0 Requirement 6.4.3 mandates strict controls over scripts that run on payment pages. It aims to stop client-side attacks…
June 18, 2025
HIPAA Compliance
How Third-Party Pixels Jeopardize HIPAA Compliance on Healthcare Websites
Third-party pixels can leak PHI and trigger HIPAA violations. Feroot helps CISOs secure healthcare websites and prevent breaches.
June 30, 2025
HIPAA Compliance
What Every CISO Needs to Know About HIPAA and Online Tracking Technologies in 2025
HIPAA compliance for tracking technologies is a CISO priority in 2025. Learn how to prevent PHI exposure from pixels, scripts, and web trackers.
June 27, 2025
Client-Side Security
Are Your Web Apps Vulnerable to Infostealers Hiding in Browser Scripts?
Infostealers bypass traditional defenses by targeting browsers. Feroot helps security teams block emerging client-side threats and comply with PCI.
June 25, 2025
Compliance
Cybersecurity Gaps in Education: Addressing Risks in Schools and Universities
TL;DR EdTech platforms and school websites are top targets for cyberattacks. Education ranks among the most targeted sectors for ransomware, phishing, and…
June 25, 2025
Web Application Security
3 Important Things to Know About Cookie Security
TL;DR Cookies can expose sensitive data if not properly secured. Attackers can intercept or manipulate cookies to steal session tokens, credentials, and…
June 25, 2025
Compliance
The 10 Most Costly GDPR Mistakes Banks and Financial Institutions Make
Many banks make GDPR mistakes due to avoidable mistakes in consent, DPIAs, and data flows. Learn how to avoid fines and automate compliance at scale.
June 23, 2025
PCI DSS Compliance
What Payment Page Scenarios Trigger PCI DSS 4.0 Requirements, and How Can CISOs Stay Compliant?
Feroot’s PaymentGuard AI helps CISOs secure PCI DSS 4.0 payment page scenarios by monitoring scripts, detecting risks, and generating reports.
June 20, 2025
Web Application Security
Everything You Need to Know About Web Application Firewalls
Learn how web application firewalls (WAF) can protect your business from client-side attacks and what limitations they might have.
June 18, 2025
PCI DSS Compliance
Ensuring PCI DSS 4.0 Compliance: A Deep Dive into Requirement 6.4.3
TL;DR PCI DSS 4.0 Requirement 6.4.3 mandates strict controls over scripts that run on payment pages. It aims to stop client-side attacks…
June 18, 2025
Press Release
Feroot Launches PaymentGuard AI: Automated PCI DSS 4 Compliance for Websites with E-commerce Payment Webpages.
PaymentGuard AI by Feroot Security: Automating PCI DSS 4 Compliance with Requirements 6.4.3 and 11.6.1 for SAQ D and SAQ A-EP E-Commerce…
Press Release
Feroot Security Debuts HealthData Shield AI at HIMSS 2025: Automating HIPAA Compliance of Websites with 95% Cost Savings
LAS VEGAS, NV, MARCH 3, 2025: Feroot Security, a leader in compliance and security of websites and web portals, will demonstrate…
Press Release
Feroot Security Launches HealthData Shield AI to Protect ePHI on Healthcare Websites and Ensure HIPAA Compliance.
HealthData Shield AI automates HIPAA compliance and protects sensitive patient data from unauthorized tracking, backed by Feroot's proven threat detection AI. TORONTO,…
News
The Wall Street Journal: Lawmakers Push to Ban DeepSeek App From U.S. Government Devices
Bipartisan Effort Seeks to Protect National Security Amid Concerns Over Chinese Data Collection WASHINGTON: A new bill set to be introduced Thursday was…
News
Yahoo Finance: U.S. Lawmakers Push to Ban China’s DeepSeek AI Over Security Risks – Feroot Security Analysis
Washington, D.C. – U.S. lawmakers announced a bill to ban DeepSeek, the Chinese AI chatbot app, from government devices following a security…
News
The Independent: Feroot Security Uncovers DeepSeek’s Hidden Code Sending User Data to China
DeepSeek’s AI Model Sparks Security Concerns Amid U.S. Scrutiny Today’s investigation by cybersecurity firm Feroot Security has revealed that DeepSeek, a widely…
News
Ivan Tsarynny on CNBC: DeepSeek’s Security Risks and Data Exposure to China Mobile
Feroot CEO Warns About DeepSeek’s Data Practices and National Security Risks On CNBC, Feroot Security CEO Ivan Tsarynny highlighted alarming cybersecurity concerns…
News
AP News – Feroot Research Uncovers DeepSeek’s Connection to Chinese State-Owned Telecom
Security Concerns Rise as DeepSeek’s Chatbot Infrastructure Links to China Mobile Researchers at Feroot Security have identified computer code within the web-based…
News
Feroot Security Research Reveals DeepSeek AI’s Hidden Data Pipeline to China
ABC Good Morning America featured an exclusive report this morning highlighting Feroot's discovery of concerning code within DeepSeek's AI platform. Feroot, a…
What is Static Application Security Testing (SAST)?
Summary Static Application Security Testing (SAST) is a white-box testing method that analyzes source code for security vulnerabilities. By identifying issues early…
July 2, 2025
What is Subresource Integrity (SRI)?
Subresource Integrity (SRI) is a browser security feature that verifies the integrity of files loaded from third-party sources. It protects websites from…
June 27, 2025
What is Runtime Application Self-Protection (RASP)?
Summary Runtime Application Self-Protection (RASP) is a security technology that detects and blocks attacks in real time from within the application. By…
June 26, 2025
What is ISO/IEC 27005:2022?
ISO/IEC 27005:2022 represents an international standard that provides thorough guidelines concerning the administration of information security risks. It is intended for implementation…
June 25, 2025
What is ISO 27004:2016?
ISO 27004:2016 provides guidance on measuring the performance and effectiveness of an Information Security Management System (ISMS), as defined in ISO/IEC 27001.…
June 23, 2025
What is ISO 27003:2017?
ISO 27003:2017 is a guidance standard that helps organizations plan, establish, and implement an Information Security Management System (ISMS) based on ISO/IEC…
June 20, 2025
What is Magecart?
Magecart: A Definition Magecart is a term for a group of cybercriminals that inject malicious JavaScript into websites, especially payment or checkout pages, to…
June 19, 2025
What is Client-Side Security?
TL;DR Client-side security protects the user-facing components of a web application, primarily what runs in the browser, from malicious code injections, third-party script abuse,…
June 18, 2025
What Is Formjacking?
TL;DR Formjacking is a type of e-skimming attack where malicious code is injected into web forms to steal user data like credit…
June 18, 2025