Can a cyber-attack count as warfare?