Is a cyber attack on power grids an act of war?

No settled international law says when code crosses into armed attack — and that ambiguity is itself considered a risk.