CERT-FR has just published a report on the integration of untrusted software. Recommendations are available at the end of the report.
https://cert.ssi.gouv.fr/cti/CERTFR-2022-CTI-007/
#Goldenspy #NotPetya