April 8, 2026 - eBuilder signs an agreement for MDR/SOC with a hotel business. March 13, 2026 - eBuilder signs an agreement for SOC-operations with a Swedish municipality. March 2, 2026 - Large international steel company chooses eBuilders Complorer for cybersecurity training. March 2, 2026 - Large international steel company chooses eBuilder as supplier for Penetration testing. March 2, 2026 - A communications/branding agency chooses eBuilders Complorer for cybersecurity training. February 13, 2026 - eBuilder Security signs an agreement for continuous pen testing with a Swedish AI-company. February 11, 2026 - eBuilder Security sells Complorer Security Awareness training to a Swedish unemployment insurance fund. January 30, 2026 - eBuilder sigs an agreement with a Swedish municipality for MDR/SOC. April 8, 2026 - eBuilder signs an agreement for MDR/SOC with a hotel business. March 13, 2026 - eBuilder signs an agreement for SOC-operations with a Swedish municipality. March 2, 2026 - Large international steel company chooses eBuilders Complorer for cybersecurity training. March 2, 2026 - Large international steel company chooses eBuilder as supplier for Penetration testing. March 2, 2026 - A communications/branding agency chooses eBuilders Complorer for cybersecurity training. February 13, 2026 - eBuilder Security signs an agreement for continuous pen testing with a Swedish AI-company. February 11, 2026 - eBuilder Security sells Complorer Security Awareness training to a Swedish unemployment insurance fund. January 30, 2026 - eBuilder sigs an agreement with a Swedish municipality for MDR/SOC.

Cybersecurity Security 101 · Knowledge hub

Cybersecurity, explained for regulated businesses

Plain-language guides on the threats, regulations and AI risks Swedish organisations need to understand, from DORA and NIS2 to ransomware and shadow AI. Written by the analysts who run our SOC.

Browse by pillar See AI security topics

CS 101 Knowledge hub

Compliance AI security Threats Operations Human layer Identity Cloud

Regulatory Detection Controls

New

8 new AI security topics added, including shadow AI, MCP security and AI-SPM

Coverage that competitor glossaries do not have. Updated alongside ENISA 2025 and the EU AI Act.

Explore AI security

Filter by pillar

All topics 14 Compliance & frameworks 6 AI security 7 Threats & attacks 1 Security operations 0 Identity & access 0 Human layer 0 Cloud & emerging 0

Most visited 6 topics

What is Deepfakes?

A plain-English guide to deepfakes: what they are, how criminals use them to impersonate executives and steal money, and the controls that actually stop them.

What is EU AI Act and Cybersecurity?

The EU AI Act categorizes artificial intelligence systems by risk, imposing stringent cybersecurity requirements on high-risk applications. It mandates robustness, accuracy, and resilience against adversarial attacks or data poisoning. Developers must implement continuous risk management and logging systems to ensure safety and fundamental rights protection.

What is Cybersäkerhetslagen?

Cybersäkerhetslagen is Sweden’s national implementation of the EU’s cybersecurity directives. It establishes rigorous legal frameworks to protect critical societal infrastructure and digital services from escalating cyber threats. The legislation mandates strict risk management practices, mandatory incident reporting, and empowers supervisory authorities to enforce regulatory compliance.

What is NIS2 (Network and Information Security Directive 2)?

NIS2 expands the EU’s cybersecurity regulations, imposing stricter security and incident reporting mandates on a broader range of critical infrastructure sectors. It introduces high financial penalties and personal accountability for top management, aiming to establish a uniformly high level of cybersecurity maturity across Europe.

What is Prompt Injection Attack?

Prompt injection is a critical vulnerability where attackers craft malicious inputs to manipulate a large language model’s output or behavior. By embedding hidden instructions, adversaries can override system prompts, bypass safety guardrails, exfiltrate private data, or trick the AI into executing unauthorized code and commands.

What is GDPR in Cybersecurity?

Under the General Data Protection Regulation (GDPR), cybersecurity is a fundamental legal obligation. Organizations must implement appropriate technical and organizational measures to ensure data confidentiality, integrity, and availability. Failure to prevent data breaches or report them within 72 hours results in severe regulatory fines.

AI security 7 topics

What is What is Shadow AI?

The business guide to shadow AI, the unapproved use of AI tools at work, and the controls that keep your data out of public models.

What is AI Anomaly Detection?

AI anomaly detection utilizes machine learning algorithms to establish behavioral baselines across networks and user activities. By continuously monitoring data streams in real-time, it instantly identifies microscopic deviations—such as unusual login patterns or abnormal data transfers—signaling potential zero-day threats, insider attacks, or system compromises.

What is MCP Security?

Model Context Protocol (MCP) standardization requires stringent security controls to govern how AI models securely connect to external data sources. Key MCP security challenges involve enforcing granular access controls, mitigating server-side request forgery (SSRF), authenticating contextual data streams, and preventing untrusted environments from poisoning model outputs.

What is Prompt Injection Attack?

Prompt injection is a critical vulnerability where attackers craft malicious inputs to manipulate a large language model’s output or behavior. By embedding hidden instructions, adversaries can override system prompts, bypass safety guardrails, exfiltrate private data, or trick the AI into executing unauthorized code and commands.

What is Agentic AI Security Risk?

Autonomous AI agents capable of executing multi-step workflows introduce profound security risks. Without strict guardrails, compromised or poorly designed agents can inadvertently escalate privileges, modify systems, leak sensitive data across connected APIs, or be manipulated into executing malicious actions on behalf of an authorized user.

What is Shadow AI?

Shadow AI refers to the unsanctioned or unmonitored use of artificial intelligence tools by employees outside IT department governance. This decentralized adoption introduces severe risks, including accidental sensitive data exposure, compliance violations, intellectual property leakage, and integration vulnerabilities that bypass established enterprise security protocols.

What is AI in Cybersecurity?

Artificial intelligence revolutionizes cybersecurity by automating threat detection, analyzing massive data volumes for anomalies, and accelerating incident response. While defenders use AI to predict and mitigate sophisticated attacks faster than humanly possible, adversaries simultaneously weaponize it to scale phishing, automate exploits, and discover vulnerabilities.

Compliance & frameworks 6 topics

What is EU AI Act and Cybersecurity?

The EU AI Act categorizes artificial intelligence systems by risk, imposing stringent cybersecurity requirements on high-risk applications. It mandates robustness, accuracy, and resilience against adversarial attacks or data poisoning. Developers must implement continuous risk management and logging systems to ensure safety and fundamental rights protection.

What is ISO 27001 (Assuming ISO 27001)?

ISO/IEC 27001 is an internationally recognized standard outlining best practices for establishing, implementing, and maintaining an Information Security Management System (ISMS). It provides a risk-based framework for managing sensitive company data, ensuring continuous security improvements, and demonstrating compliance to stakeholders through independent certification.

What is GDPR in Cybersecurity?

Under the General Data Protection Regulation (GDPR), cybersecurity is a fundamental legal obligation. Organizations must implement appropriate technical and organizational measures to ensure data confidentiality, integrity, and availability. Failure to prevent data breaches or report them within 72 hours results in severe regulatory fines.

What is Cybersäkerhetslagen?

Cybersäkerhetslagen is Sweden’s national implementation of the EU’s cybersecurity directives. It establishes rigorous legal frameworks to protect critical societal infrastructure and digital services from escalating cyber threats. The legislation mandates strict risk management practices, mandatory incident reporting, and empowers supervisory authorities to enforce regulatory compliance.

What is NIS2 (Network and Information Security Directive 2)?

NIS2 expands the EU’s cybersecurity regulations, imposing stricter security and incident reporting mandates on a broader range of critical infrastructure sectors. It introduces high financial penalties and personal accountability for top management, aiming to establish a uniformly high level of cybersecurity maturity across Europe.

What is DORA (Digital Operational Resilience Act)?

DORA is a comprehensive EU regulation mandating that financial entities and their ICT service providers maintain robust operational resilience. It enforces strict requirements for risk management, incident reporting, resilience testing, and third-party risk monitoring to ensure the financial sector can withstand severe cyber disruptions.

Threats & attacks 1 topics

What is Deepfakes?

A plain-English guide to deepfakes: what they are, how criminals use them to impersonate executives and steal money, and the controls that actually stop them.

Move from reading about it to doing something about it.

Book a 30-minute briefing with an eBuilder analyst, or run our free domain breach check first to see whether your employees' credentials are already exposed.

Book a consultation

Run the free breach check

No spam, no commitment EU data residency · ISO 27001