In Foreign Policy,  reseacher Miguel Alberto N. Gomez, argues cyberwarriors are cautious–so far.

A review of cyberoperations from 2000 to 2016 reveals an interesting pattern. Barring the large number of espionage-type operations, the remainder have been largely disruptive rather than devastating. Most involve website defacement or distributed denial-of-service attacks; these are quickly contained and remedied once discovered and don’t represent the sort of cyber-Pearl Harbor incident that remains pervasive in popular culture.

Source: In Cyberwar, There Are Some (Unspoken) Rules – Foreign Policy