StreamScan Resource Centre

In this section, you'll find the latest information about our products and much more. You'll also have access to cybersecurity research, white papers, case studies and videos, all designed to help you understand the context and stay current in the information security world.

You'll also find resources organized by sector in case you're looking for specific information on how StreamScan can help organizations in your industry. Come back often as we regularly publish new resources.

Vidéos et webinaires

La cybersécurité dans les entreprises manufacturières

Webinaire sur les cyberattaques ciblant les manufacturiers et les stratégies de protection les plus efficaces.

Planifier un budget cybersécurité réaliste : Guide pour PME

Un guide budgétaire proposant deux méthodes de calcul (0,3 à 0,5% des revenus ou 14% des dépenses TI) et trois niveaux de maturité en cybersécurité avec budgets détaillés de 50 milles à 365 milles dollars annuels.

Multiple critical security vulnerabilities reported on Fortinet: what to do?

In recent months, several critical security vulnerabilities have been reported on Fortinet equipment. Examples: CVE-2023-27997 , CVE-2023-26204 , CVE-2023-33299 , CVE-2023-22637 , CVE-2022-4133 , CVE-2022-42475 , etc.

Protection Against Fake President Fraud

Fake President fraud is a fairly common cybercriminal activity, but victim organizations don't dare talk about it openly, because it's shameful, taboo. It's shameful because victims have to admit that they've been fooled.

Free tools to decrypt your data in the event of a ransomware attack

Streamscan's incident response team regularly manages cybersecurity incidents impacting organizations in Quebec, Canada and internationally. Many of these incidents involve ransomware.

NIST 800-171 Rev 3: what you need to know

On May 10, 2023, the draft of NIST 800-171 Rev 3 was published for comment. Comments are expected by July 14, 2023. As a reminder, NIST 800-171 is the reference standard for the protection of Controlled Unclassified Information (CUI). It is required for U.S.

Assess your readiness for CMMC 2.0 or NIST 800-171 compliance

Streamscan is a CMMC Registered Provider Organization (RPO) and is officially authorized to assist organizations in their CMMC process. Complying with CMMC 2.0 or NIST 800-171 is a process that can take several months, or more than a year.

NIST 800-171 vs CMMC : understand the difference

Depending on which U.S. government department is your customer, you may be required to meet certain cybersecurity standards and requirements. You may also be required to comply with a specific cybersecurity standard by one of your partners who is a supplier to the U.S.

Exploiting RCE (Remote Code Execution) vulnerabilities: the nightmare of antivirus, EDR and SIEM.

Several RCE (Remote Code Execution) security vulnerabilities are regularly reported on the market (e.g. CVE-2023-27997 - Fortigate SSL VPN, CVE-2021-31207 Proxyshell, CVE-2021-34527 PrintNightmare, etc.).

15 June 2023 - Critical vulnerability in MOVEit Transfer - CVE-2023-35708

A critical security vulnerability has been discovered in Progress Software 's file transfer tool named MOVEit Transfer . The vulnerability is of the SQL injection type and concerns the tool's web application.

NIST 800-171 and the protection of Controlled Unclassified Information (CUI)

If you access or create Controlled Unclassified Information (CUI) as part of your business dealings with the US government, you must comply with the NIST 800-171 cybersecurity standard.

NIST 800-171 vs CMMC : understand the difference

Depending on which U.S. government department is your customer, you may be required to meet certain cybersecurity standards and requirements. You may also be required to comply with a specific cybersecurity standard by one of your partners who is a supplier to the U.S.

Exploiting RCE (Remote Code Execution) vulnerabilities: the nightmare of antivirus, EDR and SIEM.

Several RCE (Remote Code Execution) security vulnerabilities are regularly reported on the market (e.g. CVE-2023-27997 - Fortigate SSL VPN, CVE-2021-31207 Proxyshell, CVE-2021-34527 PrintNightmare, etc.).

15 June 2023 - Critical vulnerability in MOVEit Transfer - CVE-2023-35708

A critical security vulnerability has been discovered in Progress Software 's file transfer tool named MOVEit Transfer . The vulnerability is of the SQL injection type and concerns the tool's web application.

NIST 800-171 and the protection of Controlled Unclassified Information (CUI)

If you access or create Controlled Unclassified Information (CUI) as part of your business dealings with the US government, you must comply with the NIST 800-171 cybersecurity standard.

CMMC 2.0 Certification: How To Determine Your CMMC Level

As you're probably aware, since September 2020, a new cybersecurity certification has been enforced by the US Department of Defense (DoD).

12 June 2023 - Critical security vulnerability in Fortigate SSL-VPN

A security vulnerability has been reported today (12 June 2023) on Fortigate SSL VPN firewalls. The vulnerability number is CVE-2023-27997 and it has a score of 9.2 on a scale of 1 to 10 , so it is a critical vulnerability.

Bill 25 in Quebec: CAI publishes list of organizations reporting privacy incidents since September 2022

As you know, the new Bill 25 on the protection of personal information came into force in Quebec on September 22, 2022. As a reminder, this law requires all public, private and NPO organizations to take measures to protect the personal information of Quebecers.

Manufacturers: to effectively protect your OT networks, comply with the IEC 62443 standard

Manufacturing OT networks are vulnerable Manufacturing environments have the particularity of being difficult to protect.

CMMC certification and US Department of Defense data protection: Streamscan is the only RPO in Quebec

Does your organization work with the US Department of Defense (DoD) ? Are you an IT consultant for a company that works with the DoD? It is now crucial to comply with the CMMC* standard.

Quebec Industrial Barometer - 14th edition (2023) of the STIQ: What you should know about Cybersecurity.

The STIQ manufacturers' association has just published the 14th edition of its industrial barometer.

August 12, 2023

Planifier un budget cybersécurité réaliste : Guide pour PME

Un guide budgétaire proposant deux méthodes de calcul (0,3 à 0,5% des revenus ou 14% des dépenses TI) et trois niveaux de maturité en cybersécurité avec budgets détaillés de 50 milles à 365 milles dollars annuels.

Risk Analysis Questionnaire: Assess Your Cybersecurity Posture

A structured questionnaire covering 12 critical areas to assess the cybersecurity posture of SMEs, revealing weaknesses in governance, access, backups, and data protection.

Vidéos et webinaires

La cybersécurité dans les entreprises manufacturières

Webinaire sur les cyberattaques ciblant les manufacturiers et les stratégies de protection les plus efficaces.

Vidéos et webinaires

La gestion d'incidents de type ransomware

Analyse de deux attaques par rançongiciel vécues par des PME avec stratégies concrètes de protection et réponse.

Vidéos et webinaires

September 18, 2020

Le CMMC : nouvelle norme exigée par la Défense Américaine

Vidéos et webinaires

August 25, 2017

Gestion des incidents de cybersécurité

Karim Ganame, fondateur, chercheur en cybersécurité et consultant à StreamScan inc nous décrit comment la gestion des incidents de cybersécurité est devenue l’un des piliers de la sécurité des systèmes d’information

November 13, 2025

Mirai: anatomie d'un botnet qui transforme vos objets connectés en armes DDoS

Le botnet Mirai continue de menacer les objets connectés en exploitant des vulnérabilités critiques vieilles de plusieurs années dans les routeurs et caméras, transformant ces appareils négligés en armées DDoS contrôlées à distance.

October 11, 2025

MedusaLocker: un ransomware sophistiqué aux clés de chiffrement politiquement chargées

MedusaLocker version 3 combine une architecture JSON modulaire, un chiffrement hybride sophistiqué et des clés de chiffrement aux connotations politiques troublantes, tout en utilisant Windows Restart Manager et un chiffrement partiel pour maximiser son efficacité destructrice.

SpaceColon : Analyse d'un rançongiciel Delphi aux cinq modes de chiffrement

SpaceColon est un rançongiciel Delphi sophistiqué offrant cinq modes de chiffrement et utilisant un schéma cryptographique complexe avec marqueurs TIMATOMA#.

October 11, 2024

Nitrogen : Analyse d'un rançongiciel qui contourne 1877 solutions de sécurité

Analyse technique du rançongiciel Nitrogen qui utilise un pilote vulnérable pour contourner 1877 solutions de sécurité et chiffre les fichiers avec l'extension .NBA.

October 10, 2024

FOG: anatomie d'un ransomware sophistiqué piloté par configuration JSON

Le ransomware FOG se distingue par son architecture modulaire pilotée par configuration JSON cryptée, permettant aux attaquants de personnaliser chaque déploiement tout en utilisant des techniques sophistiquées comme l'API harvesting et le chiffrement RSA adaptatif.

December 15, 2021

Log4j: quand la journalisation devient une porte d'entrée

Une vulnérabilité critique dans Apache Log4j permet l'exécution de code à distance via des recherches JNDI malveillantes consignées, affectant massivement les infrastructures Java avec exploitation active immédiate.

September 18, 2020

SIGRed: quand la compression DNS devient une arme

Une vulnérabilité critique dans Windows DNS Server exploite la compression DNS et les enregistrements SIG pour dépasser les limites de registres 16 bits, provoquant un débordement mémoire et un déni de service complet.

Simuler un centre d'opérations de sécurité : Quand les tests réels ne suffisent plus

Un environnement de simulation multi-agents reproduit SOCBox, un métasystème de détection d'intrusion corrélant des données distribuées, permettant des tests reproductibles impossibles sur les 50 000 abonnés d'un réseau réel.

StreamScan needs the information you provide to us to send you our newsletter. You may unsubscribe from our communications at anytime. For more information, check out our Privacy Policy.