StreamScan Resource Centre

In this section, you'll find the latest information about our products and much more. You'll also have access to cybersecurity research, white papers, case studies and videos, all designed to help you understand the context and stay current in the information security world.

You'll also find resources organized by sector in case you're looking for specific information on how StreamScan can help organizations in your industry. Come back often as we regularly publish new resources.

Vidéos et webinaires

La cybersécurité dans les entreprises manufacturières

Webinaire sur les cyberattaques ciblant les manufacturiers et les stratégies de protection les plus efficaces.

IT Directors and CEOs: What to expect in terms of cybersecurity following the current military conflict between Russia and Ukraine

IT Directors and CEOs: What to expect in terms of cybersecurity following the current military conflict between Russia and Ukraine An increase in cyber-attacks has been observed since the start of the military conflict between Russia and Ukraine.

Making the Transition from IT Director to CISO: Challenges and Solutions.

Making the Transition from IT Director to CISO: Challenges and Solutions Are you an IT Director whose Senior Management has just assigned you the role of Cybersecurity Manager? It’s happening more and more frequently.

Pentesting is the First Step in the Cybersecurity Journey. Not the Destination.

Pentesting is the First Step in the Cybersecurity Journey. Not the Destination. When it comes to cybersecurity, computer intrusion testing (commonly called penetration testing or pentesting) often appears to many IT managers as the miracle solution to cybersecurity fears.

Your Company Will Be a Cyberattack Target - Open Letter to the Journal de Montreal

In an open letter published in the Journal de Montreal, StreamScan’s CEO, Karim Ganame has continued his mission to make sure small and medium-sized businesses understand the risks they run consistently underinvesting in cybersecurity.

Log4Shell: a new critical security vulnerability

Log4Shell: a new critical security vulnerability 2021 has not been an easy year for IT and Cybersecurity teams. After the PrintNightmare and Proxysell vulnerabilities, the Log4Shell vulnerability was confirmed on December 10, 2021.

Seven (7) signs that your network has been hacked

7 signs that your network has been hacked There are telltale signs that let you know you’ve been hacked. During any cyberattack, whether it's classic intrusions, data exfiltration, or ransomware, hackers leave their tracks in your network.

StreamScan is a Proud Five-Star Partner on Clutch

StreamScan is a Proud Five-Star Partner on Clutch Cybersecurity is a must! Millions of dollars can be lost when everything goes wrong, that’s why you need the best and most advanced cybersecurity services for your business. After all, proactivity is better than finding solutions.

IT Directors: 7 Strategies to Secure Your Network for Telecommuting

IT Directors: 7 Strategies to Secure Your Network for Telecommuting During the massive shift to telecommuting due to COVID-19, companies quickly adapted by implementing telecommuting solutions. However, security hasn’t been a top priority in most cases.

8 Common Cybersecurity Mistakes - And How to Avoid Them

Streamscan helps companies deal with security incidents every day. So we see first-hand all the schemes hackers use to get into networks. We also get the see (repeatedly) the mistakes that organizations make, that leave their networks at the merci hackers.

Employee Awareness Alone Won’t Solve your Cybersecurity Problems

Employee Awareness Alone Won’t Solve your Cybersecurity Problems IT and cybersecurity teams at many organizations are often frustrated because, despite repeated awareness training, employees still click on phishing emails.

CMMC vs. CGP (Controlled Goods Program)

CMMC (Cybersecurity Maturity Model Certification) and CGP (Controlled Goods Program) are two regulatory frameworks related to the defense sector. CMMC concerns suppliers to the US Department of Defense (DoD), while CGP concerns suppliers to National Defence Canada.

American CMMC vs Canadian CMMC (CPCSC)

If you're a Canadian company doing business with the U.S. Department of Defense (DoD), you've probably heard that Canada is going to create its own cybersecurity certification equivalent to the U.S. In this blog post, we'll introduce you to these two (2) certifications.

SPRS (Supplier Performance Risk System) score and CMMC / NIST 800-171

When you are awarded a U.S. government contract involving the use or creation of CUI , your principal may ask you to submit your SPRS score. Some of your partners may also require you to submit your SPRS score , even if you don't have a contract with the U.S.

CMMC (Cybersecurity Maturity Model Certification) and ITAR (International Traffic in Arms Regulations) are two US regulatory frameworks related to the defense sector. Among the questions frequently asked in the defense ecosystem is: are ITAR and CMMC equivalent?

Quebec Industrial Barometer - 15th edition (2024) of the STIQ: What you should know about Cybersecurity.

The manufacturers' association STIQ has just published the 15th edition (2024) of its industrial barometer .

A new ransomware group named FOG has just appeared

A new ransomware group has just appeared. Named FOG , very little information exists about this group at present.

A Collection of Datasets for Intrusion Detection in MIL-STD-1553 Platforms

MIL-STD-1553 is a standard military communications protocol that has been around for over forty years, and is essential to the operation of a wide range of defense platforms.

When you are a contractor or subcontractor to the US government (including the US Department of Defense), you may have access to two types of information : CFI and CUI. In this blog post, we'll introduce these 2 types of information.

CMMC : What is FCI, CUI, CTI, DCI, FAR, DFARS and FedRAMP

Here are some great terminologies you need to master if you need to comply with CMMC or NIST 800-171: DoD (Department of Defense) : the U.S. Department of Defense. FCI (Federal Contract Information) : information on U.S.

US Department of Defense (DoD) expands access to DIB CS program

The US Department of Defense (DoD) has clearly decided to take the necessary steps to strengthen the cybersecurity of its supply chain.

August 12, 2023

Planifier un budget cybersécurité réaliste : Guide pour PME

Un guide budgétaire proposant deux méthodes de calcul (0,3 à 0,5% des revenus ou 14% des dépenses TI) et trois niveaux de maturité en cybersécurité avec budgets détaillés de 50 milles à 365 milles dollars annuels.

Risk Analysis Questionnaire: Assess Your Cybersecurity Posture

A structured questionnaire covering 12 critical areas to assess the cybersecurity posture of SMEs, revealing weaknesses in governance, access, backups, and data protection.

Vidéos et webinaires

La cybersécurité dans les entreprises manufacturières

Webinaire sur les cyberattaques ciblant les manufacturiers et les stratégies de protection les plus efficaces.

Vidéos et webinaires

La gestion d'incidents de type ransomware

Analyse de deux attaques par rançongiciel vécues par des PME avec stratégies concrètes de protection et réponse.

Vidéos et webinaires

September 18, 2020

Le CMMC : nouvelle norme exigée par la Défense Américaine

Vidéos et webinaires

August 25, 2017

Gestion des incidents de cybersécurité

Karim Ganame, fondateur, chercheur en cybersécurité et consultant à StreamScan inc nous décrit comment la gestion des incidents de cybersécurité est devenue l’un des piliers de la sécurité des systèmes d’information

November 13, 2025

Mirai: anatomie d'un botnet qui transforme vos objets connectés en armes DDoS

Le botnet Mirai continue de menacer les objets connectés en exploitant des vulnérabilités critiques vieilles de plusieurs années dans les routeurs et caméras, transformant ces appareils négligés en armées DDoS contrôlées à distance.

October 11, 2025

MedusaLocker: un ransomware sophistiqué aux clés de chiffrement politiquement chargées

MedusaLocker version 3 combine une architecture JSON modulaire, un chiffrement hybride sophistiqué et des clés de chiffrement aux connotations politiques troublantes, tout en utilisant Windows Restart Manager et un chiffrement partiel pour maximiser son efficacité destructrice.

SpaceColon : Analyse d'un rançongiciel Delphi aux cinq modes de chiffrement

SpaceColon est un rançongiciel Delphi sophistiqué offrant cinq modes de chiffrement et utilisant un schéma cryptographique complexe avec marqueurs TIMATOMA#.

October 11, 2024

Nitrogen : Analyse d'un rançongiciel qui contourne 1877 solutions de sécurité

Analyse technique du rançongiciel Nitrogen qui utilise un pilote vulnérable pour contourner 1877 solutions de sécurité et chiffre les fichiers avec l'extension .NBA.

October 10, 2024

FOG: anatomie d'un ransomware sophistiqué piloté par configuration JSON

Le ransomware FOG se distingue par son architecture modulaire pilotée par configuration JSON cryptée, permettant aux attaquants de personnaliser chaque déploiement tout en utilisant des techniques sophistiquées comme l'API harvesting et le chiffrement RSA adaptatif.

December 15, 2021

Log4j: quand la journalisation devient une porte d'entrée

Une vulnérabilité critique dans Apache Log4j permet l'exécution de code à distance via des recherches JNDI malveillantes consignées, affectant massivement les infrastructures Java avec exploitation active immédiate.

September 18, 2020

SIGRed: quand la compression DNS devient une arme

Une vulnérabilité critique dans Windows DNS Server exploite la compression DNS et les enregistrements SIG pour dépasser les limites de registres 16 bits, provoquant un débordement mémoire et un déni de service complet.

Simuler un centre d'opérations de sécurité : Quand les tests réels ne suffisent plus

Un environnement de simulation multi-agents reproduit SOCBox, un métasystème de détection d'intrusion corrélant des données distribuées, permettant des tests reproductibles impossibles sur les 50 000 abonnés d'un réseau réel.

StreamScan needs the information you provide to us to send you our newsletter. You may unsubscribe from our communications at anytime. For more information, check out our Privacy Policy.