The data and endpoint security landscape is always changing, and news happens fast. Each week we recap some of the top security news stories to help you stay informed. Here’s what happened this week.

This advertising agency in China is going the extra mile (and then some) by developing malware, which they call HummingBad, to inject adverts into victims’ devices. The firm is also apparently behind YiSpecter iOS malware.

Following the results of the EU exit vote in Britain, hackers have gotten to work creating Brexit-themed spam campaigns. These emails come laden with malicious attachments or phishing links.

The European Commission  got serious about cybersecurity this week when they signed an agreement that could result in €1.8 billion for new cybersecurity investment by 2020. In addition, the new network and information security (NIS) directive would require companies that supply essential services to abide minimum standards of cybersecurity.

In just four days, a spam campaign to distribute Zepto ransomware hit a high-water mark of 137k emails.

The big business of cybercrime isn’t a new concept anymore, but new research suggests cybercrime patterns have been shifting towards the big paydays and the longer-term operations.