StreamScan Resource Centre

In this section, you'll find the latest information about our products and much more. You'll also have access to cybersecurity research, white papers, case studies and videos, all designed to help you understand the context and stay current in the information security world.

You'll also find resources organized by sector in case you're looking for specific information on how StreamScan can help organizations in your industry. Come back often as we regularly publish new resources.

Vidéos et webinaires

La cybersécurité dans les entreprises manufacturières

Webinaire sur les cyberattaques ciblant les manufacturiers et les stratégies de protection les plus efficaces.

Cybersecurity Investment Recommendations

We recently presented you some figures from a study conducted by Deloitte on investments in cybersecurity by companies with mature and proactive cybersecurity programs.

22 Hacks in the News in 2021 Already. But How Many More Stay Unreported?

Our Canadian Companies Hacked in 2020 was one of our most popular blog posts of the year - listing 39 hacks who made the headlines. We thought we’d give you mid-year (ok 5 month) recap of hacks that have made the news in 2021.

Does Risk Analysis Work for SMBs?

Let’s not beat around the bush. So if all you wanted was the answer, you can return to your feed scrolling. If you are curious about why Risk Assessment is such a good fit for helping SMBs develop a cybersecurity strategy that actually fits their needs, read on.

Risk Analysis Questionnaire: Assess Your Cybersecurity Posture

A structured questionnaire covering 12 critical areas to assess the cybersecurity posture of SMEs, revealing weaknesses in governance, access, backups, and data protection.

The Cost of Being Unprepared for Cyberattacks

Though cyberattacks are in the news every day, Canadian companies as a whole, and SMBs in particular, are still taking a wait-and-see approach to implementing a formal cybersecurity strategy.

First Steps – Prioritizing Key Cybersecurity Risks

A cybersecurity risk assessment is the single best place to start your company’s journey to cybersecurity maturity. But why can’t experts just tell you where to focus your cybersecurity investments?

The 80/20 Rule, or Why Choose a Risk-Based Strategy

By : Frédérik Blais Before we get into the nitty-gritty, let's first lay the cards on the table and get a picture of the situation. What's going on in the world of cybersecurity right now? Why are so many companies getting hacked day after day?

Cyber Insurance Rates Soar

According to a report released Wednesday by insurance giant Aon PLC , cyber insurance coverage rates will shoot up by 20 to 50 percent in 2021. This is in large part due to the increased frequency and severity of claims linked to ransomware attacks.

Artificial Intelligence in Cybersecurity

For the last few years, we’ve been hearing about the application of artificial intelligence in the cybersecurity world. This year technology and innovation have taken a backseat to news on COVID-19. But there’s no doubt that AI is back in the news now.

StreamScan in the News: Huawei Mobile Data Keys in use at Revenu Quebec

StreamScan CEO Karim Ganame was quoted this week in a Journal de Quebec article looking into the risks associated with the use of Huawei mobile data keys at Revenue Quebec.

February 28, 2024

Recording - Webinar Streamscan and Canadian Commercial Corporation (CCC) - Cybersecurity Basics for Government Contracts

If you missed our webinar on cybersecurity basics for US and Canadian government contracts, you can view the recording here (French) : https://www.ccc.ca/fr/videos/fondements-de-cybersecurite-pour-contrats-gouvernementaux/

January 24, 2024

Streamscan and Canadian Commercial Corporation (CCC) Webinar- Cybersecurity basics for government contracts

Join us for our webinar in partnership with Canadian Commercial Corporation | Corporation commerciale canadienne on the basics of cybersecurity for government contracts on Tuesday January 30 at 1pm.

January 5, 2024

In the News : Streamscan launches a new technology (EDR) to better protect SMB's

Streamscan has just launched an advanced antivirus. This cybersecurity product, known as an "Endpoint detection and response (EDR)", can detect anomalies directly on employees' computers and tablets and act to prevent the threat, thanks to artificial intelligence (AI).

January 2, 2024

December 26, 2023: DoD publishes CMMC proposed rule

On Monday December 26, 2023, the US Department of Defense (DoD) published the CMMC proposed rule . Note that an unofficial version had been circulating since December 22, 2023.

October 18, 2023

WEBINAR organized by Aéro Montréal, in collaboration with StreamScan Cybersecurity and Public Services and Procurement Canada

Only a few places remain for the CYBERSECURITY WEBINAR organized by Aéro Montréal, in collaboration with StreamScan Cybersecurity and Public Services and Procurement Canada | Services publics et Approvisionnement Canada.

Multiple critical security vulnerabilities reported on Fortinet: what to do?

In recent months, several critical security vulnerabilities have been reported on Fortinet equipment. Examples: CVE-2023-27997 , CVE-2023-26204 , CVE-2023-33299 , CVE-2023-22637 , CVE-2022-4133 , CVE-2022-42475 , etc.

Protection Against Fake President Fraud

Fake President fraud is a fairly common cybercriminal activity, but victim organizations don't dare talk about it openly, because it's shameful, taboo. It's shameful because victims have to admit that they've been fooled.

Free tools to decrypt your data in the event of a ransomware attack

Streamscan's incident response team regularly manages cybersecurity incidents impacting organizations in Quebec, Canada and internationally. Many of these incidents involve ransomware.

NIST 800-171 Rev 3: what you need to know

On May 10, 2023, the draft of NIST 800-171 Rev 3 was published for comment. Comments are expected by July 14, 2023. As a reminder, NIST 800-171 is the reference standard for the protection of Controlled Unclassified Information (CUI). It is required for U.S.

Assess your readiness for CMMC 2.0 or NIST 800-171 compliance

Streamscan is a CMMC Registered Provider Organization (RPO) and is officially authorized to assist organizations in their CMMC process. Complying with CMMC 2.0 or NIST 800-171 is a process that can take several months, or more than a year.

August 12, 2023

Planifier un budget cybersécurité réaliste : Guide pour PME

Un guide budgétaire proposant deux méthodes de calcul (0,3 à 0,5% des revenus ou 14% des dépenses TI) et trois niveaux de maturité en cybersécurité avec budgets détaillés de 50 milles à 365 milles dollars annuels.

Risk Analysis Questionnaire: Assess Your Cybersecurity Posture

A structured questionnaire covering 12 critical areas to assess the cybersecurity posture of SMEs, revealing weaknesses in governance, access, backups, and data protection.

Vidéos et webinaires

La cybersécurité dans les entreprises manufacturières

Webinaire sur les cyberattaques ciblant les manufacturiers et les stratégies de protection les plus efficaces.

Vidéos et webinaires

La gestion d'incidents de type ransomware

Analyse de deux attaques par rançongiciel vécues par des PME avec stratégies concrètes de protection et réponse.

Vidéos et webinaires

September 18, 2020

Le CMMC : nouvelle norme exigée par la Défense Américaine

Vidéos et webinaires

August 25, 2017

Gestion des incidents de cybersécurité

Karim Ganame, fondateur, chercheur en cybersécurité et consultant à StreamScan inc nous décrit comment la gestion des incidents de cybersécurité est devenue l’un des piliers de la sécurité des systèmes d’information

November 13, 2025

Mirai: anatomie d'un botnet qui transforme vos objets connectés en armes DDoS

Le botnet Mirai continue de menacer les objets connectés en exploitant des vulnérabilités critiques vieilles de plusieurs années dans les routeurs et caméras, transformant ces appareils négligés en armées DDoS contrôlées à distance.

October 11, 2025

MedusaLocker: un ransomware sophistiqué aux clés de chiffrement politiquement chargées

MedusaLocker version 3 combine une architecture JSON modulaire, un chiffrement hybride sophistiqué et des clés de chiffrement aux connotations politiques troublantes, tout en utilisant Windows Restart Manager et un chiffrement partiel pour maximiser son efficacité destructrice.

SpaceColon : Analyse d'un rançongiciel Delphi aux cinq modes de chiffrement

SpaceColon est un rançongiciel Delphi sophistiqué offrant cinq modes de chiffrement et utilisant un schéma cryptographique complexe avec marqueurs TIMATOMA#.

October 11, 2024

Nitrogen : Analyse d'un rançongiciel qui contourne 1877 solutions de sécurité

Analyse technique du rançongiciel Nitrogen qui utilise un pilote vulnérable pour contourner 1877 solutions de sécurité et chiffre les fichiers avec l'extension .NBA.

October 10, 2024

FOG: anatomie d'un ransomware sophistiqué piloté par configuration JSON

Le ransomware FOG se distingue par son architecture modulaire pilotée par configuration JSON cryptée, permettant aux attaquants de personnaliser chaque déploiement tout en utilisant des techniques sophistiquées comme l'API harvesting et le chiffrement RSA adaptatif.

December 15, 2021

Log4j: quand la journalisation devient une porte d'entrée

Une vulnérabilité critique dans Apache Log4j permet l'exécution de code à distance via des recherches JNDI malveillantes consignées, affectant massivement les infrastructures Java avec exploitation active immédiate.

September 18, 2020

SIGRed: quand la compression DNS devient une arme

Une vulnérabilité critique dans Windows DNS Server exploite la compression DNS et les enregistrements SIG pour dépasser les limites de registres 16 bits, provoquant un débordement mémoire et un déni de service complet.

Simuler un centre d'opérations de sécurité : Quand les tests réels ne suffisent plus

Un environnement de simulation multi-agents reproduit SOCBox, un métasystème de détection d'intrusion corrélant des données distribuées, permettant des tests reproductibles impossibles sur les 50 000 abonnés d'un réseau réel.

StreamScan needs the information you provide to us to send you our newsletter. You may unsubscribe from our communications at anytime. For more information, check out our Privacy Policy.