Interesting news:
https://www.cnn.com/2018/09/18/politics/us-military-cyberattacks-authority/index.html
Not really sure the entire context, though, just a news flash.
Knowing how difficult attribution is, I wonder who makes the call that they are retaliating against the right person. Would hate to be the cyber equivalent of a victim of "SWATTING"
Also, cyberattack could be hard to control, the concern should also be on the cyber attack going out of control and inflict damages on allies or innocent third parties. "Collateral Damage" as they call it, could be hard to avoid.