Europol just dismantled three major malware networks that stole logins from WordPress sites and employee computers. Here's how to check if your business was hit and what to do today. This week, Europol and its international partners announced the lat...
Read more about Operation Endgame Seized 6.4 Million Stolen Logins — Check If Yours Are Among Them
Attackers are chaining a patched PHP flaw with a brand-new root exploit on Check Point firewalls to plant a backdoor and, in some cases, wipe VMware ESXi servers entirely.If your business, or your IT provider, uses a Check Point Security Gateway as a...
Read more about Check Point Firewalls Under Active Attack: Backdoor Deployed, VMware Servers Wiped
If your business uses Citrix NetScaler ADC or Gateway as the front door for remote work — the box your staff connect to from home, or the one your partners use to reach shared systems — you have patching to do before Monday morning. What happened On...
Read more about Citrix Patches 28 NetScaler Flaws — One Needs No Login at All: Patch by Monday
A week after a breach through its AI-connected admin interface, German web host Mittwald was hit again overnight — this time attackers defaced its own corporate website. Here's what to check today. German web hosting provider Mittwald was struck by a...
Read more about Mittwald Hit Again: Second AI-Assisted Attack Defaces Hoster's Own Website
If your business runs its own website, online shop, or customer portal on Apache HTTP Server, there is a new reason to act today, not next week. A critical vulnerability tracked as CVE-2026-119618 lets an attacker take over an unpatched server remote...
Read more about Critical Apache Flaw Lets Hackers Take Over Websites With No Login — Patch Now
If an external IT provider manages your PCs and servers through remote-access software, read this before you do anything else today. A fast-moving attack campaign is hijacking ConnectWise ScreenConnect partner accounts — the exact kind of tool many m...
Read more about ScreenConnect Hijack Spreading Now: If Your IT Provider Uses It, Act Today
A new report shows that tens of thousands of apps built with AI "vibe-coding" tools are sitting wide open on the internet, no login required. If anyone in your business has ever used a tool like Grok, Lovable, Replit, v0, Bolt, Base44 or Google AI St...
Read more about 35,000 "Vibe-Coded" Grok Apps Left Wide Open: Check What Your Staff Built This Week
Microsoft's November 2026 Patch Tuesday, released on 10 November, fixes 1,093 vulnerabilities across Windows, Office, Azure and server products. One of them is already being used by attackers right now: an Outlook spoofing flaw tracked as CVE-2026-12...
Read more about Outlook Zero-Day Steals Windows Passwords by Opening an Email — Patch by 24 November
A critical, actively exploited bug in Xen Orchestra lets attackers skip the login screen entirely and take root control of your virtual servers — without leaving a trace in the logs. If your business or IT provider runs virtual machines on XCP-ng thr...
Read more about Xen Orchestra Flaw Lets Hackers Become "Admin" With a Fake Cookie — Check Your VMs Today
SAP's monthly Security Patch Day landed on 10 November 2026 with 35 new security notes and four GitHub security advisories. Buried in that list are four flaws that deserve your immediate attention: all four score a perfect 10.0 on the CVSS severity s...
Read more about SAP Patch Day: Four Max-Severity Flaws Let Attackers Take Over Without a Password
If your business outsources IT support to a managed service provider (MSP), there is a good chance that provider uses a remote monitoring and management (RMM) tool to watch over your PCs, servers and network from a distance. One of the most widely us...
Read more about N-able N-central Taken Offline After 33 Zero-Days Leaked: What to Check If You Outsource IT
On Monday, the US Cybersecurity and Infrastructure Security Agency (CISA) added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, confirming that all four are already being actively exploited in the wild. Unusually, this...
Read more about CISA's 3-Day Deadline: Four Critical Flaws Hit VoIP, File Transfer, SSH and AI Servers
Since 5 November, Outlook.com has been silently rejecting emails from domains without a DMARC record — even tiny senders. Here's the one-line fix and how to check if you're affected.If you email customers who use Outlook.com, Hotmail, Live or MSN add...
Read more about Outlook.com Is Quietly Bouncing Your Emails — Fix It Today With One DNS Record
A seventh Swiss pension fund has confirmed exposure in the PK Softech supply-chain breach. If your business outsources payroll or pension admin, here's what to check now.Pensionskasse Zug has confirmed it is the latest victim of a supply-chain cybera...
Read more about Pension Fund Breach Widens: Pensionskasse Zug Confirms Exposure — Check Your Payroll Vendor Today
If your business keeps backups or shares files on a QNAP NAS, and that device also runs the Plex media app, you need to stop and check it today. QNAP has confirmed that attackers are actively breaking into NAS devices through a set of vulnerabilities...
Read more about QNAP NAS Devices Hacked via Plex2Shell: Check Yours Today, Patching Isn't Enough
A severe WordPress flaw now under active attack can hit your site even during the update meant to fix it. Here's what to check today before you click "update." If your business runs a WordPress website or online shop, there's a new problem that goes...
Read more about WordPress Update Flaw (CVE-2026-119977): Patching Alone Won't Save You Now
If your development or automation team uses Anthropic's Claude Code, there is a simple click that may have already put your company's passwords on the public internet. Security researchers have found thousands of exposed credentials tied to a single...
Read more about Claude Code Is Leaking Passwords to GitHub: Check Your Repos Today
Until this week, cold-chain sabotage looked like a problem for European supermarket chains far from Switzerland. That changed when hackers manipulated the refrigeration controls at Lüthi's Fleischwaren, a butcher shop in Köniz BE, spoiling meat and f...
Read more about Cold-Chain Hacking Hits Switzerland: Why Your Fridge Could Be the Next Target
If your business relies on Barracuda's Email Security Gateway (ESG) to filter spam and phishing, there's a problem you need to deal with this week, not next month. On 6 November 2026, security researchers at watchTowr Labs published a working proof-o...
Read more about Barracuda Email Security Gateway: Root-Level Takeover Possible With No Login at All
A newly disclosed OpenSSH vulnerability is already being exploited in the wild — and if your business runs Docker containers, CI/CD pipelines, or lightweight cloud Linux images, there's a real chance you're affected without knowing it. What happened...
Read more about SSHole Flaw: Alpine Linux Containers Are Open to Passwordless Root Login
If your business uses a SonicWall firewall for remote access, stop and check your SonicOS version today. On 6 November 2026, the US Cybersecurity and Infrastructure Security Agency (CISA) added a new vulnerability to its Known Exploited Vulnerabiliti...
Read more about SonicWall VPN Flaw Lets Hackers Bypass MFA — Patch Today, Not Next Week
If you run a small or medium business in Switzerland, you've probably noticed something: phishing emails don't look like scams anymore. No more broken German, no more obvious red flags. That's because attackers are now using AI tools to write convinc...
Read more about AI-Powered Phishing Is Here: What Swiss SMEs Must Do This Week
In its weekly review of 3 November 2026, the Swiss National Cyber Security Centre (NCSC, in German BACS) warns of a dangerous combination: devices with security vulnerabilities that can be reached from the internet. The NCSC received several reports...
Read more about NCSC Warning: Every Open Port Is a Bet Against the Attackers
On 14 December 2026, a setting takes effect in Microsoft 365 that many Swiss SMEs have never seen. It is called “Store Microsoft 365 customer data in-country”, and it decides whether your emails, files and Teams chats stay stored in Switzerland. That...
Read more about Microsoft 365: One Switch Decides Whether Your Data Stays in Switzerland
People talk about bootstrapped software like it is a different animal from a "real" startup. It is not. Same five phases, same order, same place where most of them die. The only real difference is whose money is burning.Here is the honest version, wi...
Read more about Your side project and the funded startup run the exact same playbook
I spend my days helping companies ship software — and my evenings doing my own bookkeeping. So we built an AI to take it off my plate. Here's what running a Swiss SME's back office on AI agents actually taught me.The tax nobody puts on the roadmapAh,...
Read more about Flitz.ai - Your Business Runs Itself
So, the last couple of days have been a bit of a whirlwind in developerland. I wanted to take a moment to write down what I’ve seen, and what I think it means, because these aren’t small updates. This is a shift in how we build, browse, and write cod...
Read more about Last 48 Hours in Tech: Atlas Browsers and Agentic IDEs – What Just Happened?
Updated 2025!“The art of developing an application has been well described in various coding books that you can find gathering dust on almost all developers desks around the world. This is not that book. There may be some technical references, but as...
Read more about Updated 2025! New book out! The CTO Playbook
Six months ago I introduced Swarmia into our engineering ecosystem—not out of curiosity alone, but out of need. As I reflected in The CTO Playbook, when a tech team grows, when its output becomes a mix of many intertwined signals, what separates the...
Read more about Managing Tech Tems with Insights
If you’re building a product in a complex industry—pharma, finance, or anything heavily regulated—you probably already know the challenges. You’ve validated the need, you’ve spoken to potential users, and you might even have a working prototype. But...
Read more about You need a technical co-founder. You don’t have the budget. Now what?
The development landscape has evolved significantly in recent years, and APIs (Application Programming Interfaces) are now central to how modern systems communicate. This is especially true for businesses looking to harness the power of AI. APIs simp...
Read more about API and AI: How modern integration transforms ecommerce
Ah, developers. The mythical creatures who type fast, drink coffee like it’s an Olympic sport, and somehow “fix computers” for their friends and family. But what do they really do all day? Let me paint you a picture—spoiler: it’s way more complicated...
Read more about What Developers Really Do: A Peek Behind the Keyboard
A few years ago I wrote "The CTO Playbook" (available on Amazon). I extensively went in to leadership styles and especially in leading tech teams. With the latest rise of tech founders taking a bigger place on the large scene, for example with Elon M...
Read more about Musks leadership style versus The CTO Playbook
When the AI "lies" to youThis month we are happy to share not only sunshine stories on how cool the AIs are, but also when it doesn't work. It truly shows that the LLMs are really not any "AI" (yet) and it's in its infancy, read more and I'll explain...
Read more about When the AI lies to you
Hiring developers can be a nightmareEspecially if you're a non-technical founder. You’ve probably heard terms thrown around that you barely understand, like “full stack,” “Kubernetes,” or “REST APIs,” and you might think, “I just need someone who kno...
Read more about Hiring developers: why cultural fit beats technical expertise
In The CTO Playbook, Robert Mejlerö provides a comprehensive look at Agile, focusing on its core principles and practical implementation. He highlights the Agile Manifesto, which emphasizes individuals and interactions over processes and tools, and w...
Read more about What The CTO Playbook say about agile
Benefits of Using the "CTO TMC Advisor AI" for CTOs and People Working with DevelopersIn today’s rapidly evolving tech landscape, CTOs and those working closely with development teams need reliable, actionable insights to drive technology decisions a...
Read more about Struggling with Tech Decisions? Here’s the AI Every CTO Needs to Know About
Stepping into the shoes of a tech team leader can be both exhilarating and daunting.Whether you're a CTO, a product manager, or someone newly responsible for guiding a team of developers, the complex digital landscape requires an understanding far be...
Read more about Navigating Tech Leadership: 5 key areas to focus on
Throw out the old ways, in with the new.Let’s stop comparing those apples and oranges. A common language is what keeps us understanding each other. So when we speak about certain business terms, we may use words for one thing even though we may...
Read more about Forbidden words list
Online presence – what to write and what to shareAs the CTO, or any other person with a separate title responsible for tech teams, you are a spokes person for the company in a way, and what you share and do on social media like LinkedIn is going to b...
Read more about Social Media
A story is better than a thousand KPI’sAs with all other chapters, I start with a slight existential question. Are you regularly invited to report to the board?Some organisations still think that their CTO’s are IT managers, or a scaled up Developer...
Read more about Board presentations
Don’t measure what you can't controlOnce upon a time when I worked as an Engineering Manager I was asked by the CEO to report on certain KPI’s in order to measure and control performance of the development team.We had KPI’s (Key Performance Indicator...
Read more about KPI’S and OKR’s
How a stable budget work helps you be geared to run a great teamOwning your own budget could really help you and your team to be able to work efficiently and to the point.The beauty of budgets is that they are decided once per year (and probably nego...
Read more about Budget
How to communicate what’s being worked on, what’s going to be worked on and what’s donePeople either directly involved in your project or product or affected by the outcome of your activities will need to be continuously getting status updates throug...
Read more about Project Updates
Sharing your company communication over Slack isn’t really that uncommonIn this remote working world — where many teams are spread out doing “home office”, we really need to communicate harder, better and smarter. I’m no communication expert, but in...
Read more about Communicating
Do you want to spend time approving leave requests?Trusting your employees to effectively manage their own time is a game-changer. Let everyone decide their own working time, when to take time off and how to manage and handle their own work.Again, we...
Read more about Time Off
99% of developers would not call Software development “coding”.We input instructions in a file, which is interpreted by another program on the server, returning back a result. That’s it. Coding is indeed the art of telling the “computer” what to do a...
Read more about Coding
They beauty of working with others is that they experience things about you. And users experience a lot using your product.What's harder in life than hearing something you have been working on or been a part of is not working to another persons expec...
Read more about Feedback
SaaS or develop yourself?The classic question that you have heard so many times, in so many shapes. Now, slightly adjusted for our purpose I will discuss some thoughts around the topic.If you want to build the most expensive tool ever built — build i...
Read more about Build or Buy
An innovation process. An oxymoron.On one axis you have innovation, the other side process. They are their own complete opposites. There is no innovation in a process.We follow its steps, and any attempt to bypass, go outside the box or follow anothe...
Read more about Innovation
Culture eats Strategy for breakfastBefore even touching the topic of motivation, I’d like to talk about some very important prerequisites I think needs to be there. Trying to motivate people without having great leaders is like try to make a Volvo 24...
Read more about Motivation
The biggest threat to self-managed employees who would like to get a higher sense of inclusion and has an inner drive.Accountability is an interesting word. It means “the fact or condition of being accountable; responsibility”. Google says that: “lac...
Read more about Avoiding micro management
The last two years has proven that “work from home” is here to stay, and is already the default way of working in the futureHome office, as it was called before, has been around for a long time. At least for developers it was great to be able to stay...
Read more about Working remote
Let’s visit some interesting collaboration models and how they have been working out.Spotify are famous among developer circles for their collaboration model. At the time it came, it was something new and fresh. Built on agile principles but also hav...
Read more about Collaboration models
When a new team gets together, there are certain dynamics at work. Understanding these basics helps you understand what’s going on.You have managed to get the entire team to that team offsite. The trip in went well and everyone have arrived. It’s tim...
Read more about Forming
Is working with developers and tech projects any different than leading people in other areas?Here we go thru topics such as leadership styles and basic ways of how to work with people in a way that is inspiring, motivating and is supporting people.I...
Read more about Leading developers
Infrastructure, antivirus, azure, office 365, drive, client management — all those IT tasks.Is IT-management a part of the work as a CTO? Sound more like something under the wings of a CIO – but in reality in smaller companies the CTO could need to d...
Read more about Computers and Security
Get data from other sources using API’s.Finally something fun! Application Programming Interface (API) is the way to connect different systems with each other. Is it plug and play as in you just click and it's done? No way. 99% of all API’s require p...
Read more about API’s
How to get something from idea to done using a standard development process.There are many different Development processes. I’ve worked with Waterfall phasing, scrum with sprints which releases all at the same time once done as well as Release Trains...
Read more about Development process
When the shit hits the fanLate Friday evening, just when you are about to sit down for that family dinner, the phone buzzes and you get notifications from your favourite monitoring service that the website is down.You excuse yourself and prepare for...
Read more about Incident Management
Keeping all your applications properly monitored makes it easier to understand if they are up or down.Astonishingly many online services are not monitored and this has the obvious effect that no one knows when they are working or not.An important too...
Read more about Monitoring
You capture a lot, but why do you need it?Data is important and if interpreted in a way that makes sense, it could help your company to take the right decisions.During the recent years there has been a lot of new regulation regarding the handling of...
Read more about Data
At the right level at the right momentBring out your favourite pillow because it’s time for some discussion about everyones most boring topic — documentation. Believe it or not, in the beginning of dev times this was a true and an important deliverab...
Read more about Documentation
What should you focus on now? I’m going thru some ways of creating value thru setting the right priorities.Switching focus in the middle of the task is the worst thing for most developers, and perhaps also other employees. As a CTO or anyone leading...
Read more about Prioritising
Git, Pull Requests, Quality, Workflows, Four-Eye-Principle, PrettifyAs mentioned in the previous chapter, Devops are important to maintain code but guess what this is also a team effort, and on top of that it’s also a business critical priority, beca...
Read more about Maintaining the code
Well, you don’t want obvious bugs. Releasing fast doesn’t mean we need to release things that breaks the application or looks bad.To test something before release is a good idea. Testing is as with everything else — a big topic and there are differen...
Read more about Testing
The important work of maintaining servers, environments, code bases, version and all to enable developers to work.Development Operations. This guild that few knows the essence of. Is it just a developer fixing some automatic release scripts? Yes, som...
Read more about Devops
What happens in the browser, stays in the browser.We divide code in Frontend and Backend. Not really for fun, but because of a reason. In order to understand basic Software Architecture, we need to understand the split between frontend and backend.It...
Read more about Frontend, backend and their devs
Here we are discussing programming languages, frameworks and stacks.Software development in the context of this book means building an application that is used in the web browser. Or, in some cases, on your phone as an installed “app”.While tradition...
Read more about Programming languages vs Frameworks vs Stacks
From idea to working product that actually is solving something for someone who’s paying for itAs you read in the Starting a Project chapter, building a project is all about trying out the idea fast and see how it’s received, then build on the f...
Read more about Build a product
Let’s go from zero to hero by looking at the pieces needed for a Project that becomes a Product that becomes something useful.You are going to build a great product, but I got news for you. It all starts as a project. It’s fine. We can call it Produc...
Read more about Starting a project
Plan the Kanban product developmentWe need to talk about plans. One of the biggest misunderstandings about Agile is that you can’t plan. It's not true. You just can’t make detailed long term plans that must be followed and be super strict.One way to...
Read more about Planning
An intro to the basics of true agile. The word “agile” can be heard in meetings and seen in presentations. There are many misunderstandings and it would make sense to discuss these, however let’s start with the agile basics.In 2001 a group of de...
Read more about Agile
Business first means business first.Beautiful code or just working code? Maintaining code or building new features and increase sales? Adhere to the development process, continuously remove technical debt, prettifying code or keeping the stack up to...
Read more about What to focus on
Remove access, conduct interview and close down all accounts when someone is leaving – and drink the grave beers.Removing access to systems is important, and should be done the day after the person leaves the team. Here, it's also a good idea to chan...
Read more about Off-boarding
About bad apples and how to throw them out. That's a clickbait title for you and has nothing to do with the content of this chapter.One person in your team is not delivering. There’s a lot of subtile messaging in that sentence. Let’s dig down. I thin...
Read more about Firing
When you are looking for a CTO - do you need the hands-on-CTO, the business project manager-CTO or the experienced tech lead and people leader-CTO?Abbreviations - we all love and hate them. We love them because they are easy to remember and can expla...
Read more about The three types of CTOs
You want in-house developers sitting next to you?If you look at job ads for developers, they are “usually” pretty much alike. There is an intro about what the company do, then some role info and some perks. Most also states that there is an office sp...
Read more about Outsourcing
Dear ChatGPT - what's the current status of AI?I asked the latest hype – our new companion ChatGPT from OpenAI.com what it thinks about ethical concerns and possibilities concerning AI.Actually, all I did was to ask this:Please write me an article ab...
Read more about Asking ChatGPT about AI ethics and opportunities
What's agile all about?Being a big topic ten years ago - fast forward til today - is it still interesting? Yes, very much. And no, the basics didn't really change.Agile product development is a method of creating and delivering products that is chara...
Read more about Agile basics
What is the time from someones life worth?The topic of salaries and renumeration is a huge topic that deserves its own book. My take on it is that people should be paid fairly, to their market “value” and “enough”. Up to a certain level, getting...
Read more about What to pay
Getting new developers up to speed and give them a warm welcome.One thing is for sure. You will be doing this activity together with new people joining your company many times. No matter how much don't want people to leave and you are told "ensure th...
Read more about Onboarding
Getting the right people on board is as hard as it sounds.Having the right people on the team is of course very important. But who are the right people and where can you find them? Not so easy.Finding your future coworkers takes a lot of time and eff...
Read more about Hiring the right people
Are you bored at work?Working within technology for almost two decades, I've obviously met a lot of developers. There is much to be said about all the great people I've had the chance to work with – but in this post I'd like to focus on something mos...
Read more about Developers on an equity model
New book out!The art of developing an application has been well described in various coding books that you can find gathering dust on almost all developers desks around the world. This is not that book. There may be some technical references, but ast...
Read more about The CTO Playbook
It’s with great joy that we can announce that Hyro has become part of Juice, a new and innovative recruitment platform.Announcement: The danish recruitment platform called Hyro will be closed and moved to Juice. Hyro was an algorithm-based recruitmen...
Read more about Hyro becomes Juice
Have you been following my posts about millennials? As I wrote my master thesis about “What motivates early millennials in the workplace?” there has been a series of posts about the topic “Seven Areas of Work Motivation” and &...
Read more about This motivates millennials in the workplace
Download the master thesis “What motivates early millennials in the workplace” as PDF or iBook (Free on iTunes).The purpose of this thesis is to research the motivation of early millennials in the work place. Previous studies show the need to fu...
Read more about Master Thesis – what motivates early millennials in the workplace?
Are all millennials motivated in the same way, just because they are born between 1980 and 2000? Turnbull (2011) has developed a theory that consists of four personality groups (called typologies): Gung-Ho, which is the natural leader and driver of t...
Read more about The different types of millennials
Have you been following my posts about millennials? As I wrote my MBA master thesis about “What motivates early millennials in the workplace?” there has been a series of posts about the topic “Seven Areas of Work Motivation“,...
Read more about This is how important the line manager is for millennials
Have you been following my posts about millennials? As I wrote my MBA master thesis about “What motivates early millennials in the workplace?” there has been a series of posts about the topic “Seven Areas of Work Motivation“,...
Read more about 5 things to motivate millenials to reach their full potential
It’s been said for a while that “recruitment is broken”. I have at least heard it for the last years. Is it really? Why is it that finding a job, or finding great candidates for the job takes so much time? Obviously you’re dea...
Read more about Something new in the recruitment space
The word of the year 2020 will undoubtedly be “Can you hear me”. The “Corona”-year has forced almost all office workers into a work-from home, juggle kids-lockdowns-food-order-online-life-routine. We’ve all seen a hug...
Read more about Can you hear me?
In an agile world the definition of done is interesting. Sometimes a feature is considered done, from a developer or development process perspective, when it’s moved to the Done-column. Now it “just” needs to be tested and released....
Read more about Is it done or is it done-done?
The recent boom in government enforced working from home situation is now exercised by hundreds of thousands of workers world wide. Many, who has years experience doing it, some under the tight supervision of micro managing bosses and just by their m...
Read more about Remote management or remote leadership?
We help companies with their technology, providing CTO-services and Product Management. Trusted for our CTO-services, we work with both startups and established businesses in the Nordics, Switzerland and US.
Visit us The Mejlerö Company GmbHWe are a Swiss Company (LLC) based in 
Switzerland.
