StreamScan Resource Centre

In this section, you'll find the latest information about our products and much more. You'll also have access to cybersecurity research, white papers, case studies and videos, all designed to help you understand the context and stay current in the information security world.

You'll also find resources organized by sector in case you're looking for specific information on how StreamScan can help organizations in your industry. Come back often as we regularly publish new resources.

Vidéos et webinaires

La cybersécurité dans les entreprises manufacturières

Webinaire sur les cyberattaques ciblant les manufacturiers et les stratégies de protection les plus efficaces.

September 13, 2024: CMMC passes regulatory examination

The implementation of CMMC certification is gathering pace. On September 13, 2024, the CMMC Final Rule ( 32 CFR) passed regulatory review. This is a very important milestone, coming sooner than expected.

Streamscan partners with cyber insurer CFC for incident response in Quebec

Streamscan is pleased to announce its partnership with London-based cyber insurer CFC . CFC is a major player in cyber insurance, with a strong presence in North America, particularly in Quebec.

CMMC: DoD publishes contractor obligations - 48 CFR CMMC

Department of Defense (DoD) has just proposed a Final Rule to clarify its CMMC procurement rules. Here is a summary of the obligations of DoD contractors and subcontractors (48 CFR CMMC ).

Do you need cyber insurance?

Wondering whether or not it's a good idea to have cyber insurance? Here's the answer from our Chief Cybersecurity Officer, Dr Karim Ganame, who has managed dozens of incidents over the past few years, including major cyber crises.

CMMC: What's new in August 2024

Every month, CyberAB, the organization that coordinates CMMC, organizes a meeting to share information on what's new at CMMC ( CyberAB Town Halls ). As CMMC RPO, Streamscan participates in these monthly meetings.

August 15, 2024 - DoD proposes final rule to incorporate CMMC requirements into its contracts

August 15, 2024 marked another milestone in the implementation of CMMC. Department of Defense (DoD) has just proposed a Final Rule to clarify its CMMC procurement rules and how it wants to integrate its cybersecurity requirements into contractual relationships with its suppliers.

Major Microsoft computer failure linked to Crowdstrike

On July 19, 2024, a major computer failure affected Windows systems using Crowdstrike Falcon, an endpoint protection tool (EDR).

Quebec- Grant available for CMMC Certification

Are you a Quebec company doing business with the U.S. Department of Defense (DoD) and need to certify/comply to CMMC or NIST 800-171? Short-term grant available. Contact us to find out more.

Should You Trust a Third Party with Your Cybersecurity?

Why should you delegate control of your cybersecurity to an external company?

Example of a tabletop scenario (cyberattack simulation)

Here's an example of a simulation scenario (tabletop) to get you practicing On Friday at 11.57PM your system administrator receives an alert indicating that the antivirus has stopped on his AD (domain controller).

December 12, 2022

Cybersecurity Expert Answers Manufacturer Questions

Summary of our experiences at the Conférence des Enjeux Manufacturiers (CEM) organized by the STIQ on the 1st December 20222.

December 12, 2022

Critical Security Vulnerability in FortiOS SSL-VPN

Critical Security Vulnerability in FortiOS SSL-VPN A CRITICAL vulnerability (score of 9.3) has been reported today, December 12, 2022 on FortiOS SSL-VPN.

December 2, 2022

How to React After A Security Breach Leak

Without proper protection, security incidents can happen at any time, indiscriminately targeting businesses. Don't wait until your vulnerability is exposed in the media to think about cybersecurity. The consequences can be disastrous!

November 22, 2022

Upcoming: Karim Ganame at the Conférence Enjeux Manufacturiers 2022

On December 1st, StreamScan’s president and founder, Karim Ganame, will have the great honor to be the cybersecurity’s guest speaker at the first edition of the Conference Enjeux Manufacturers (CEM).

November 2, 2022

2 HIGH Severity Vulnerabilities Reported on OPENSSL

Two high severity vulnerabilities have been reported on OPENSSL. These vulnerabilities (CVE-2022-3602 and CVE-2022-3786) affect the OpenSSL 3.0.0 and later versions.

October 11, 2022

Radio Canada - Interview with Streamscan's Chief Cyber Security Officer on cyber-crime negotiation

A short Radio Canada capsule this morning in this month of cyber security awareness. Our expert Karim Ganame, PhD, GCIH, GCIA, CISSP was interviewed on the topic: negotiating cyber ransoms. You can listen to it again on the official page of Radio-Canada.

October 9, 2022

New critical security vulnerability in Fortinet firewall CVE-2022-40684 (CVSS score: 9.6)

A security vulnerability has been reported on Fortinet firewalls. The vulnerability number is CVE-2022-40684 and it has a score of 9.6 on a scale of 1 to 10 , so it is a critical vulnerability.

September 21, 2022

SOC vs MDR When an organization wants to outsource its cybersecurity management, it usually has a choice between SOC and MDR. The SOC (Cyber Security Operations Center) is an operational team responsible for monitoring the security of a computer network.

September 13, 2022

Implementation of Act 25 in Quebec

Implementation of Act 25 in Quebec: welcome to the hacking jungle and the world of quadruple extortion One of the paradoxes of cybersecurity is that hackers love to operate in places where there are laws governing cybersecurity. The stricter the laws, the happier the hackers are.

August 29, 2022

NDR and EDR are emerging terminologies in cybersecurity. What are these tools used for? Does one replace the other? In this article, we will clarify the role of each. NDR (Network Detection and Response) NDRs are the ultimate intrusion detection technology.

August 12, 2023

Planifier un budget cybersécurité réaliste : Guide pour PME

Un guide budgétaire proposant deux méthodes de calcul (0,3 à 0,5% des revenus ou 14% des dépenses TI) et trois niveaux de maturité en cybersécurité avec budgets détaillés de 50 milles à 365 milles dollars annuels.

Risk Analysis Questionnaire: Assess Your Cybersecurity Posture

A structured questionnaire covering 12 critical areas to assess the cybersecurity posture of SMEs, revealing weaknesses in governance, access, backups, and data protection.

Vidéos et webinaires

La cybersécurité dans les entreprises manufacturières

Webinaire sur les cyberattaques ciblant les manufacturiers et les stratégies de protection les plus efficaces.

Vidéos et webinaires

La gestion d'incidents de type ransomware

Analyse de deux attaques par rançongiciel vécues par des PME avec stratégies concrètes de protection et réponse.

Vidéos et webinaires

September 18, 2020

Le CMMC : nouvelle norme exigée par la Défense Américaine

Vidéos et webinaires

August 25, 2017

Gestion des incidents de cybersécurité

Karim Ganame, fondateur, chercheur en cybersécurité et consultant à StreamScan inc nous décrit comment la gestion des incidents de cybersécurité est devenue l’un des piliers de la sécurité des systèmes d’information

November 13, 2025

Mirai: anatomie d'un botnet qui transforme vos objets connectés en armes DDoS

Le botnet Mirai continue de menacer les objets connectés en exploitant des vulnérabilités critiques vieilles de plusieurs années dans les routeurs et caméras, transformant ces appareils négligés en armées DDoS contrôlées à distance.

October 11, 2025

MedusaLocker: un ransomware sophistiqué aux clés de chiffrement politiquement chargées

MedusaLocker version 3 combine une architecture JSON modulaire, un chiffrement hybride sophistiqué et des clés de chiffrement aux connotations politiques troublantes, tout en utilisant Windows Restart Manager et un chiffrement partiel pour maximiser son efficacité destructrice.

SpaceColon : Analyse d'un rançongiciel Delphi aux cinq modes de chiffrement

SpaceColon est un rançongiciel Delphi sophistiqué offrant cinq modes de chiffrement et utilisant un schéma cryptographique complexe avec marqueurs TIMATOMA#.

October 11, 2024

Nitrogen : Analyse d'un rançongiciel qui contourne 1877 solutions de sécurité

Analyse technique du rançongiciel Nitrogen qui utilise un pilote vulnérable pour contourner 1877 solutions de sécurité et chiffre les fichiers avec l'extension .NBA.

October 10, 2024

FOG: anatomie d'un ransomware sophistiqué piloté par configuration JSON

Le ransomware FOG se distingue par son architecture modulaire pilotée par configuration JSON cryptée, permettant aux attaquants de personnaliser chaque déploiement tout en utilisant des techniques sophistiquées comme l'API harvesting et le chiffrement RSA adaptatif.

December 15, 2021

Log4j: quand la journalisation devient une porte d'entrée

Une vulnérabilité critique dans Apache Log4j permet l'exécution de code à distance via des recherches JNDI malveillantes consignées, affectant massivement les infrastructures Java avec exploitation active immédiate.

September 18, 2020

SIGRed: quand la compression DNS devient une arme

Une vulnérabilité critique dans Windows DNS Server exploite la compression DNS et les enregistrements SIG pour dépasser les limites de registres 16 bits, provoquant un débordement mémoire et un déni de service complet.

Simuler un centre d'opérations de sécurité : Quand les tests réels ne suffisent plus

Un environnement de simulation multi-agents reproduit SOCBox, un métasystème de détection d'intrusion corrélant des données distribuées, permettant des tests reproductibles impossibles sur les 50 000 abonnés d'un réseau réel.

StreamScan needs the information you provide to us to send you our newsletter. You may unsubscribe from our communications at anytime. For more information, check out our Privacy Policy.