StreamScan Resource Centre

In this section, you'll find the latest information about our products and much more. You'll also have access to cybersecurity research, white papers, case studies and videos, all designed to help you understand the context and stay current in the information security world.

You'll also find resources organized by sector in case you're looking for specific information on how StreamScan can help organizations in your industry. Come back often as we regularly publish new resources.

Vidéos et webinaires

La cybersécurité dans les entreprises manufacturières

Webinaire sur les cyberattaques ciblant les manufacturiers et les stratégies de protection les plus efficaces.

How A Strategic Cybersecurity Audit Can Save You Money In The Long Run

How A Strategic Cybersecurity Audit Can Save You Money In The Long Run While most companies recognize they need stronger cybersecurity measures, many make the mistake of buying security tools first, and ask important questions later.

Critical security vulnerability in Microsoft SharePoint on prem (CVE-2025-53770 score of 9.8/10)

A critical security vulnerability CVE-2025-53770 (score of 9.8) has been discovered in Microsoft SharePoint on prem. A massive exploitation of the vulnerability is underway.

SpaceColon : Analyse d'un rançongiciel Delphi aux cinq modes de chiffrement

SpaceColon est un rançongiciel Delphi sophistiqué offrant cinq modes de chiffrement et utilisant un schéma cryptographique complexe avec marqueurs TIMATOMA#.

StreamScan: A canadian expertise in cybersecurity

At Streamscan, we are proud of our 100% Canadian identity. Our cybersecurity solutions, designed and developed in the heart of Canada, are aimed at protecting businesses from growing and increasingly complex cyber threats.

New Canadian Cyber Security Certification CPCSC : what you need to know

On March 12, 2025, Canada introduced its Cybersecurity Certification Program ( CPCSC ) to strengthen the security of the national defense supply chain. This certification is inspired by the US CMMC and is based on the NIST 800-171 Rev3 and NIST 800-172 standards.

Critical security vulnerability in Apache Tomcat (CVE-2025-24813 score of 9.8/10)

A critical security vulnerability CVE-2025-24813 (score of 9.8) has been discovered in Apache Tomcat.

The ISA/IEC-62443-2-1-2024 standard replaces the previous version from 2010

The IEC 62443 standard remains an essential framework for the management of industrial cybersecurity, defining best practices to ensure continuous protection of OT networks. The ISA/IEC-62443-2-1-2024 standard, replacing the previous version from 2010.

PowerSchool: data leaked during a cybersecurity incident

S 2011, StreamScan has built a team of experts specialized in cyber incident response ⚠️, tackling critical attacks and guiding clients through tough decisions, i .

Cybersecurity priorities for IT Managers: 7 essential actions for 2025

As the new year begins, IT managers need to review their priorities to protect their business in the face of increasingly sophisticated cyber threats. Here are 7 key actions you absolutely must take as we enter 2025.

A new variant of the EAGERBEE backdoor targets ISPs and governments in the Middle East

A new variant of EAGERBEE is currently in active operation, targeting Internet service providers and government entities in the Middle East. EAGERBEE is a backdoor used in espionage campaigns.

September 29, 2020

MSP, MSSP, MDR - How do You Choose?

Month over month, the number of companies offering managed services seems to be in constant growth. Whether it is MSPs, MSSPs or MDRs, it’s sometimes tough to figure out what’s what in the wild world of cybersecurity services.

September 22, 2020

5 Top Cybersecurity Trends for 2020

In 2020, cybersecurity is a hot topic in companies around the globe. Events of the last few months have forced many organizations to turn to telework, bringing with it a whole new set of cybersecurity challenges.

September 18, 2020

CMMC Certification for Manufacturers - What You Need to Know

The Cybersecurity Maturity Model Certification or CMMC is a new security certification from the U.S. Department of Defense (DoD) that will come in September 2020. It will apply to all contractors and suppliers doing business with the DoD, whether in the US, Canada, or elsewhere.

September 10, 2020

CDS Selected as Cybersecurity Innovation by Federal Government

The Federal Government of Canada’s Build in Canada Innovation Program ( BCIP ) recently selected StreamScan's CDS ( Cyberthreat Detection System ) technology as an innovative cybersecurity solution.

Telus Huawei towers a Potential National Security Threat

According to a recent Journal de Montréal article, Telus has nearly 70 cell towers around the Ottawa area using technology from Chinese communications giant Huawei. The paper asked StreamScan CEO Karime Ganame for his take on the situation.

Palantir Deal Lack Transparency

Karim Ganame recently asked Le Journal de Montréal for his opinion on the million-dollar contract that Ottawa has allegedly signed with the controversial surveillance firm Palantir. “I’m skeptical,” he stated.

Tempted to change your antivirus after a ransomware infection ? Good or bad idea?

It is common to see ransomware victims wanting to change their antivirus software if it has not been able to detect it.

Significant Increase in Brute Force Attacks Targeting RDPs

Over the past few weeks, in our security monitoring centre, we have been observing an increase in brute force attacks targeting "remote office" (ROP) corporate access.

The Rubidium01 case

Streamscan specializes in the detection and elimination of intrusions into computer networks. We are constantly called upon to intervene directly in companies to limit the damage during a computer attack.

The phone rings: the manager of a company has just been hacked and needs help. The caller explains that he was shocked when he woke up to see several calls in the absence of customers and journalists trying to reach him.

August 12, 2023

Planifier un budget cybersécurité réaliste : Guide pour PME

Un guide budgétaire proposant deux méthodes de calcul (0,3 à 0,5% des revenus ou 14% des dépenses TI) et trois niveaux de maturité en cybersécurité avec budgets détaillés de 50 milles à 365 milles dollars annuels.

Risk Analysis Questionnaire: Assess Your Cybersecurity Posture

A structured questionnaire covering 12 critical areas to assess the cybersecurity posture of SMEs, revealing weaknesses in governance, access, backups, and data protection.

Vidéos et webinaires

La cybersécurité dans les entreprises manufacturières

Webinaire sur les cyberattaques ciblant les manufacturiers et les stratégies de protection les plus efficaces.

Vidéos et webinaires

La gestion d'incidents de type ransomware

Analyse de deux attaques par rançongiciel vécues par des PME avec stratégies concrètes de protection et réponse.

Vidéos et webinaires

September 18, 2020

Le CMMC : nouvelle norme exigée par la Défense Américaine

Vidéos et webinaires

August 25, 2017

Gestion des incidents de cybersécurité

Karim Ganame, fondateur, chercheur en cybersécurité et consultant à StreamScan inc nous décrit comment la gestion des incidents de cybersécurité est devenue l’un des piliers de la sécurité des systèmes d’information

November 13, 2025

Mirai: anatomie d'un botnet qui transforme vos objets connectés en armes DDoS

Le botnet Mirai continue de menacer les objets connectés en exploitant des vulnérabilités critiques vieilles de plusieurs années dans les routeurs et caméras, transformant ces appareils négligés en armées DDoS contrôlées à distance.

October 11, 2025

MedusaLocker: un ransomware sophistiqué aux clés de chiffrement politiquement chargées

MedusaLocker version 3 combine une architecture JSON modulaire, un chiffrement hybride sophistiqué et des clés de chiffrement aux connotations politiques troublantes, tout en utilisant Windows Restart Manager et un chiffrement partiel pour maximiser son efficacité destructrice.

SpaceColon : Analyse d'un rançongiciel Delphi aux cinq modes de chiffrement

SpaceColon est un rançongiciel Delphi sophistiqué offrant cinq modes de chiffrement et utilisant un schéma cryptographique complexe avec marqueurs TIMATOMA#.

October 11, 2024

Nitrogen : Analyse d'un rançongiciel qui contourne 1877 solutions de sécurité

Analyse technique du rançongiciel Nitrogen qui utilise un pilote vulnérable pour contourner 1877 solutions de sécurité et chiffre les fichiers avec l'extension .NBA.

October 10, 2024

FOG: anatomie d'un ransomware sophistiqué piloté par configuration JSON

Le ransomware FOG se distingue par son architecture modulaire pilotée par configuration JSON cryptée, permettant aux attaquants de personnaliser chaque déploiement tout en utilisant des techniques sophistiquées comme l'API harvesting et le chiffrement RSA adaptatif.

December 15, 2021

Log4j: quand la journalisation devient une porte d'entrée

Une vulnérabilité critique dans Apache Log4j permet l'exécution de code à distance via des recherches JNDI malveillantes consignées, affectant massivement les infrastructures Java avec exploitation active immédiate.

September 18, 2020

SIGRed: quand la compression DNS devient une arme

Une vulnérabilité critique dans Windows DNS Server exploite la compression DNS et les enregistrements SIG pour dépasser les limites de registres 16 bits, provoquant un débordement mémoire et un déni de service complet.

Simuler un centre d'opérations de sécurité : Quand les tests réels ne suffisent plus

Un environnement de simulation multi-agents reproduit SOCBox, un métasystème de détection d'intrusion corrélant des données distribuées, permettant des tests reproductibles impossibles sur les 50 000 abonnés d'un réseau réel.

StreamScan needs the information you provide to us to send you our newsletter. You may unsubscribe from our communications at anytime. For more information, check out our Privacy Policy.