Some insurance companies cited “act of war” exclusions to try to avoid covering the damage of a Russian cyberattack against Ukraine in 2017 that rippled outward internationally, causing billions of dollars in damage. Now, as U.S. officials warn of similar hacks, a New Jersey judge said such clauses covered “traditional” war—physical, not cyber, activity.