BIS Adds NSO, Others to Entity List, Called 'Long Overdue'

The Bureau of Industry and Security will add four companies in Israel, Russia and Singapore to the entity list for "malicious cyber activities" contrary to U.S. foreign policy and national security, BIS said; see also a State Department announcement. The two Israeli companies that include NSO Group supply malicious spyware to foreign governments, and the companies in Russia and Singapore “traffic in cyber exploits” that threaten the “privacy and security of individuals and organizations worldwide.” BIS' parent agency the Commerce Department said these additions -- which take effect Thursday, when they're to be published in the Federal Register -- reflect a government-wide effort to "stem the proliferation of digital tools used for repression." Adding NSO and others is "long overdue," Access Now said. It said the EU and other governments "should implement similar restrictions on surveillance tech companies who facilitate human rights violations. The privacy advocacy group wants the U.S. government to sanction owners and affiliates of NSO Group and Candiru, another company that's being added to the BIS list. NSO "is dismayed by" BIS' decision because "our technologies support US national security interests and policies by preventing terrorism and crime," emailed a company spokesperson. "We will advocate for this decision to be reversed.”