The US Commerce Department’s Bureau of Industry and Security (BIS) has added NSO Group to the Entity List, effectively blacklisting it.