Defining Acceptable Acts of War

If we don't respond to North Korea's cyber attack on Sony with enough impact to really hurt North Korea's rulers, don't we just green-light other countries like Russia--which is reeling under economic problems from their physical world aggression against Ukraine--by signaling that they can get away with acts of war outside of the physical world?