My view of the state-level (golden) rule for cyberwarefare:

(1) Thou shalt not publish the goods on another country's elite else they shalt do the same to you.