StreamScan Resource Centre

In this section, you'll find the latest information about our products and much more. You'll also have access to cybersecurity research, white papers, case studies and videos, all designed to help you understand the context and stay current in the information security world.

You'll also find resources organized by sector in case you're looking for specific information on how StreamScan can help organizations in your industry. Come back often as we regularly publish new resources.

Vidéos et webinaires

La cybersécurité dans les entreprises manufacturières

Webinaire sur les cyberattaques ciblant les manufacturiers et les stratégies de protection les plus efficaces.

The Myth of “Offsetting” Cybersecurity Investments

Data backup: if we're paying for better threat detection and response, shouldn't that reduce our exposure to incidents requiring recovery?

2026-4-14 - Government of Canada introduces Level 1 of Canadian Program for Cyber Security Certification

Today, April 14, 2026, the Canadian federal government is officially launching the CPCSC Level 1 certification . It will be required for federal contracts starting in the summer of 2026. CPCSC Level 1 consists of 13controls.

Cyberattacks: The Limits of EDR and How to Achieve True 360° Visibility

Monitoring your network only with EDR? You're going to get hacked. More and more security monitoring services rely 100% on endpoint detection. Because of its simplicity and the obvious impacts of a compromised endpoint, it may seem like a good idea, but the reality is different.

PRESS RELEASE – StreamScan Launches StreamEnclave: A Secure Solution to Accelerate CMMC Certification

Montreal — StreamScan, a Canadian cybersecurity company specializing in advanced threat detection and the protection of critical environments, today announced the launch of StreamEnclave, a secure platform designed to help organizations achieve CMMC (Cybersecurity Maturity Model

ITSP.10.171: The New Standard That Is Transforming Cybersecurity for Canadian Defense Contractors

Imagine that your company could work with the Canadian government (and more specifically, the Canadian Department of National Defence) while ensuring that all sensitive data is protected as if inside a digital fortress. That is exactly what the ITSP.10.171 standard enables.

Reverse Engineering of the INC RANSOM Ransomware

Introduction INC Ransom (also known as INC ransomware) is a ransomware strain that emerged in 2023 as a “ransomware-as-a-service” (RaaS) operation, providing its affiliates with the malware and infrastructure needed to carry out attacks.

Here are the 13 controls for Level 1 of the Canadian Program for Cyber Security Certification (CPCSC)

Several people have contacted us about the security requirements for CPCSC Level 1 certification.

HARD HATS & HACKERS

HARD HATS & HACKERS Why Canadian construction companies are cybercriminals' new favourite targets and What the Law Now Demands You Do About It Picture this: It's 6:45 a.m. Your site foreman has been on the road for 40 minutes.

February 16, 2026: Latest news on Canadian Defense cybersecurity certification - CPCSC

Reminder On March 12, 2025, Canada implemented the Canadian Program for Cyber Security Certification (CPCSC) to strengthen the security of the national defense supply chain.

Recommendations for all organizations dealing with the threat of ransomware

Here are our recommendations for all organizations dealing with the threat of ransomware: ➔ Recognize that cyberattacks have become an integral part of today's reality, and ransomware is here to stay. No one is immune to these attacks.

November 24, 2020

Top 5 Ways Hackers Get Into Your Network

How are hackers getting into our networks? That’s a question we get every day. As part of our Managed Detection and Response (MDR) service, StreamScan remotely monitors our customers' networks’ security.

November 23, 2020

Webinaire à ne pas manquer !

Webinaire - Cybersécurité La solution Détection et Réponse Gérées pour les PME Comment optimiser ses budgets de sécurité informatique à l’heure actuelle où les cyberattaques se font de plus en plus nombreuses ?

November 18, 2020

47% of Hacks in Canada are Against SMBs According to Stats Can

La Presse recently cited some very interesting research from Statistics Canada : 21% of Canadian businesses were affected by a cybersecurity incident in 2019 47% of the companies affected by cybersecurity incidents are SMEs These firms spent less than 1% of total revenue on cyber

November 12, 2020

MDR Showdown: Developers vs. Reseller/Integrators

When you start to realize the magnitude of the risks cyberattacks pose finding the right security option for your organization can become a serious challenge.

November 10, 2020

In the News: StreamScan Technology to Protect Canada’s Fighter Jets

Exclusive in this week’s Journal de Montréal: StreamScan secures DND contract to protect Canada’s jet fighters from cyberattack For fighter aircraft, it’s vital to closely monitor communications, because if there is an intrusion, the damage can be major.

November 2, 2020

Why Are Cyber Criminals Targeting Canadian Businesses?

“Hackers abroad target the Canadian government..." "Canada among targets of an alleged Chinese hacking campaign..." "Russian hackers target Canadian COVID vaccine research..." "Russian hackers target Canadian COVID vaccine research..." The headlines don’t lie.

October 27, 2020

Why are Cybercriminals Targeting SMBs?

Even today, most people believe hackers only target large companies. “Why would someone hack a company like us?” they say to themselves. But if you do a little research and look beyond the headlines, you’ll see a different picture.

October 13, 2020

Cybersecurity for Manufacturers - Where to start?

Cybersecurity for Manufacturers - Where to start? Cybersecurity for manufacturers is challenging. With numerous outdated and unsupported systems in the production chain, manufacturers are vulnerable, and hackers know it.

October 7, 2020

Threat Intel is Dead Long Live Network Monitoring

For years now, cyber threat intelligence has been accepted as one of the standard cybersecurity approaches. Today, however, the changing nature and exploding volume of cyber threats are challenging the ability of threat intelligence services to protect organizations effectively.

October 5, 2020

Identify Theft Booming in COVID Times Quebec

According to a recent article in the Journal de Montréal, Quebec has seen a dramatic increase in identity theft complaints since the start of the COVID pandemic. In just four months, at least 33% (1,578) of the 4,730 cases reported in Canada originated in the province.

August 12, 2023

Planifier un budget cybersécurité réaliste : Guide pour PME

Un guide budgétaire proposant deux méthodes de calcul (0,3 à 0,5% des revenus ou 14% des dépenses TI) et trois niveaux de maturité en cybersécurité avec budgets détaillés de 50 milles à 365 milles dollars annuels.

Risk Analysis Questionnaire: Assess Your Cybersecurity Posture

A structured questionnaire covering 12 critical areas to assess the cybersecurity posture of SMEs, revealing weaknesses in governance, access, backups, and data protection.

Vidéos et webinaires

La cybersécurité dans les entreprises manufacturières

Webinaire sur les cyberattaques ciblant les manufacturiers et les stratégies de protection les plus efficaces.

Vidéos et webinaires

La gestion d'incidents de type ransomware

Analyse de deux attaques par rançongiciel vécues par des PME avec stratégies concrètes de protection et réponse.

Vidéos et webinaires

September 18, 2020

Le CMMC : nouvelle norme exigée par la Défense Américaine

Vidéos et webinaires

August 25, 2017

Gestion des incidents de cybersécurité

Karim Ganame, fondateur, chercheur en cybersécurité et consultant à StreamScan inc nous décrit comment la gestion des incidents de cybersécurité est devenue l’un des piliers de la sécurité des systèmes d’information

November 13, 2025

Mirai: anatomie d'un botnet qui transforme vos objets connectés en armes DDoS

Le botnet Mirai continue de menacer les objets connectés en exploitant des vulnérabilités critiques vieilles de plusieurs années dans les routeurs et caméras, transformant ces appareils négligés en armées DDoS contrôlées à distance.

October 11, 2025

MedusaLocker: un ransomware sophistiqué aux clés de chiffrement politiquement chargées

MedusaLocker version 3 combine une architecture JSON modulaire, un chiffrement hybride sophistiqué et des clés de chiffrement aux connotations politiques troublantes, tout en utilisant Windows Restart Manager et un chiffrement partiel pour maximiser son efficacité destructrice.

SpaceColon : Analyse d'un rançongiciel Delphi aux cinq modes de chiffrement

SpaceColon est un rançongiciel Delphi sophistiqué offrant cinq modes de chiffrement et utilisant un schéma cryptographique complexe avec marqueurs TIMATOMA#.

October 11, 2024

Nitrogen : Analyse d'un rançongiciel qui contourne 1877 solutions de sécurité

Analyse technique du rançongiciel Nitrogen qui utilise un pilote vulnérable pour contourner 1877 solutions de sécurité et chiffre les fichiers avec l'extension .NBA.

October 10, 2024

FOG: anatomie d'un ransomware sophistiqué piloté par configuration JSON

Le ransomware FOG se distingue par son architecture modulaire pilotée par configuration JSON cryptée, permettant aux attaquants de personnaliser chaque déploiement tout en utilisant des techniques sophistiquées comme l'API harvesting et le chiffrement RSA adaptatif.

December 15, 2021

Log4j: quand la journalisation devient une porte d'entrée

Une vulnérabilité critique dans Apache Log4j permet l'exécution de code à distance via des recherches JNDI malveillantes consignées, affectant massivement les infrastructures Java avec exploitation active immédiate.

September 18, 2020

SIGRed: quand la compression DNS devient une arme

Une vulnérabilité critique dans Windows DNS Server exploite la compression DNS et les enregistrements SIG pour dépasser les limites de registres 16 bits, provoquant un débordement mémoire et un déni de service complet.

Simuler un centre d'opérations de sécurité : Quand les tests réels ne suffisent plus

Un environnement de simulation multi-agents reproduit SOCBox, un métasystème de détection d'intrusion corrélant des données distribuées, permettant des tests reproductibles impossibles sur les 50 000 abonnés d'un réseau réel.

StreamScan needs the information you provide to us to send you our newsletter. You may unsubscribe from our communications at anytime. For more information, check out our Privacy Policy.