A cyberattack can steal secrets, paralyse government systems, disrupt critical infrastructure or cause physical destruction without a single conventional weapon being fired. But when does such an operation cross the legal threshold from hostile cyber activity into a prohibited use of force or an armed attack? This ALI analysis examines the evolving international-law framework governing cyber warfare, State responsibility, attribution, sovereignty, self-defence and internation