On New Year's Eve, OFAC published 31 CFR Part 578, aka the Cyber-Related Sanctions Regulations. The OFAC notice notes that these are interim, and that they expect that more comprehensive regulations will replace these, and there will likely be guidance and licensing information forthcoming as well.
Links:
Cyber-Related Sanctions Regulations