StreamScan Resource Centre

In this section, you'll find the latest information about our products and much more. You'll also have access to cybersecurity research, white papers, case studies and videos, all designed to help you understand the context and stay current in the information security world.

You'll also find resources organized by sector in case you're looking for specific information on how StreamScan can help organizations in your industry. Come back often as we regularly publish new resources.

Vidéos et webinaires

La cybersécurité dans les entreprises manufacturières

Webinaire sur les cyberattaques ciblant les manufacturiers et les stratégies de protection les plus efficaces.

StreamScan's SIEM architecture selected as the reference by the Cloud Security Alliance (CSA)

StreamScan's SIEM architecture selected as the reference by the Cloud Security Alliance (CSA) The Cloud Security Alliance (CSA) is the leading international organization for security in the cloud environments.

Who is attacking us?

Streamscan regularly helps organizations that have been victims of cyber attacks and ransomware to eradicate the incident and get back into production as quickly as possible. When an organization is victim of a cyber attack, it is legitimate to ask questions.

U.S. Department of Defense: CMMC 2.0 Cybersecurity Certification Required!

As of September 2020, a new cybersecurity certification has been put into effect by the U.S. Department of Defense (DoD).

Vidéos et webinaires

La cybersécurité dans les entreprises manufacturières

Webinaire sur les cyberattaques ciblant les manufacturiers et les stratégies de protection les plus efficaces.

StreamScan's CDS, a cybersecurity innovation developed in Montreal

You have probably already heard about the CDS cyber threat detection technology developed by StreamScan. What is this technology used for? In what context should it be used? In this blog post, we will explain this technology and its importance in securing computer networks.

EDR vs NDR vs XDR vs MDR

EDR vs NDR vs XDR vs MDR If you are in the IT or cybersecurity field, you will surely have noticed the appearance of new terminologies in cybersecurity. Or simply new technologies that have arrived on the market? In this article we will demystify these terminologies.

SMEs need to focus on operational cybersecurity

SMEs need to focus on operational cybersecurity Some organizations prefer to start their cybersecurity strategy by writing their governance framework (security policy, cybersecurity processes, etc.).

CMMC 2.0 Certification: How To Identify The CMMC Level You Need To Meet

As you're probably aware, since September 2020, a new cybersecurity certification has been enforced by the US Department of Defense (DoD).

SIEM is not an IDS/IPS and does not protect you against cyber attacks

There is a lot of confusion in the cybersecurity field regarding the use of SIEM (Security Information and Event Management) to secure networks. Wrongly, they are assimilated to those tools allowing to detect cyber attacks that target organizations.

Top 5 Cybersecurity risks in the manufacturing sector

Streamscan has a long experience in securing manufacturing IT and OT environments. For example: We help manufacturers define and implement their IT and OT cyber defense strategy.

October 5, 2021

MDR vs MSSP: Why choose a MDR for your business

MSSPs focus on the management and security of the IT assets. MSSPs center their work more on the management of security consoles and the availability and administration of security alerts.

September 27, 2021

How Streamscan CDS protects you against ransomwares ?

According to a study conducted by Sophos in 2020 (the state of ransomware 2020) , these are the seven most common ways for ransomware to enter computer networks: A downloaded file or email with a malicious link: 29 Front-end attack on a server and intrusion: 21 Email with a malic

September 20, 2021

Cybersecurity in the health and pharmaceutical sector, state of play

Among recent hacking victims reported in the media are American pharmaceutical giant ExecuPharm and the French pharmaceutical company Pierre Fabre . In Canada, Toronto's Humber River Hospital in June 2021 and CIUSSS du Centre-Ouest-de-l'Île-de-Montréal in 2020 were also targeted.

September 13, 2021

Proxyshell : A new critical windows vulnerability

The months of July and August 2021 have definitely not been a restful time for system administrators or Windows security.

September 13, 2021

6 myths about ransomwares

Streamscan's cybersecurity incident response team regularly helps companies manage the impact of ransomware attacks. Here are 6 common myths about ransomware, based on our years of field experience, that could be putting your networks at risk.

August 24, 2021

Cybersecurity for Manufacturers: How to Protect OT Infrastructure

The latest cyber-attacks on manufacturers and infrastructure, such as the one on Colonial Pipelines, Merck, or the water treatment plant in Florida, have shed some light on the vulnerability of numerous organizations considered as critical infrastructure.

August 19, 2021

Major Microsoft vulnerabilities during July 2021

In July 2021, two major vulnerabilities targeting Windows machines were discovered by cybersecurity researchers. These exploit the print spooler on Windows machines and allow a malicious actor to execute code on the vulnerable machines with SYSTEM (administrator) privileges.

August 11, 2021

How StreamScan Protects Against Kaseya Type Ransomware Attack ?

The threat On the night of July 2, 2021, at 2:00 a.m., Kaseya announced that it had suffered a ransomware attack targeting its VSA technology. VSA is a popular computer network management technology used by organisations and IT outsourcing service providers worldwide.

Does AI and Automation in Cybersecurity Matter for SMBs ?

Suddenly everyone is talking about automation in cybersecurity. Six months ago, the talk was all about orchestration, and now suddenly, we’ve fast-forwarded to automation.

Minimize the Impact of Zero-Day vulnerabilities with Network Protection

Minimize the Impact of Zero-Day Vulnerabilities with Network Protection Protecting your company against evolving threats should always be a major goal of any cybersecurity program. But zero-day threats are a challenge for even the best-prepared organizations.

August 12, 2023

Planifier un budget cybersécurité réaliste : Guide pour PME

Un guide budgétaire proposant deux méthodes de calcul (0,3 à 0,5% des revenus ou 14% des dépenses TI) et trois niveaux de maturité en cybersécurité avec budgets détaillés de 50 milles à 365 milles dollars annuels.

Risk Analysis Questionnaire: Assess Your Cybersecurity Posture

A structured questionnaire covering 12 critical areas to assess the cybersecurity posture of SMEs, revealing weaknesses in governance, access, backups, and data protection.

Vidéos et webinaires

La cybersécurité dans les entreprises manufacturières

Webinaire sur les cyberattaques ciblant les manufacturiers et les stratégies de protection les plus efficaces.

Vidéos et webinaires

La gestion d'incidents de type ransomware

Analyse de deux attaques par rançongiciel vécues par des PME avec stratégies concrètes de protection et réponse.

Vidéos et webinaires

September 18, 2020

Le CMMC : nouvelle norme exigée par la Défense Américaine

Vidéos et webinaires

August 25, 2017

Gestion des incidents de cybersécurité

Karim Ganame, fondateur, chercheur en cybersécurité et consultant à StreamScan inc nous décrit comment la gestion des incidents de cybersécurité est devenue l’un des piliers de la sécurité des systèmes d’information

November 13, 2025

Mirai: anatomie d'un botnet qui transforme vos objets connectés en armes DDoS

Le botnet Mirai continue de menacer les objets connectés en exploitant des vulnérabilités critiques vieilles de plusieurs années dans les routeurs et caméras, transformant ces appareils négligés en armées DDoS contrôlées à distance.

October 11, 2025

MedusaLocker: un ransomware sophistiqué aux clés de chiffrement politiquement chargées

MedusaLocker version 3 combine une architecture JSON modulaire, un chiffrement hybride sophistiqué et des clés de chiffrement aux connotations politiques troublantes, tout en utilisant Windows Restart Manager et un chiffrement partiel pour maximiser son efficacité destructrice.

SpaceColon : Analyse d'un rançongiciel Delphi aux cinq modes de chiffrement

SpaceColon est un rançongiciel Delphi sophistiqué offrant cinq modes de chiffrement et utilisant un schéma cryptographique complexe avec marqueurs TIMATOMA#.

October 11, 2024

Nitrogen : Analyse d'un rançongiciel qui contourne 1877 solutions de sécurité

Analyse technique du rançongiciel Nitrogen qui utilise un pilote vulnérable pour contourner 1877 solutions de sécurité et chiffre les fichiers avec l'extension .NBA.

October 10, 2024

FOG: anatomie d'un ransomware sophistiqué piloté par configuration JSON

Le ransomware FOG se distingue par son architecture modulaire pilotée par configuration JSON cryptée, permettant aux attaquants de personnaliser chaque déploiement tout en utilisant des techniques sophistiquées comme l'API harvesting et le chiffrement RSA adaptatif.

December 15, 2021

Log4j: quand la journalisation devient une porte d'entrée

Une vulnérabilité critique dans Apache Log4j permet l'exécution de code à distance via des recherches JNDI malveillantes consignées, affectant massivement les infrastructures Java avec exploitation active immédiate.

September 18, 2020

SIGRed: quand la compression DNS devient une arme

Une vulnérabilité critique dans Windows DNS Server exploite la compression DNS et les enregistrements SIG pour dépasser les limites de registres 16 bits, provoquant un débordement mémoire et un déni de service complet.

Simuler un centre d'opérations de sécurité : Quand les tests réels ne suffisent plus

Un environnement de simulation multi-agents reproduit SOCBox, un métasystème de détection d'intrusion corrélant des données distribuées, permettant des tests reproductibles impossibles sur les 50 000 abonnés d'un réseau réel.

StreamScan needs the information you provide to us to send you our newsletter. You may unsubscribe from our communications at anytime. For more information, check out our Privacy Policy.