Do cyber attacks or sabotage count?

All attacks count but there needs to be some damage.

What if it is indirect, for example an air defense system that protects nuclear facilities like in the last attack?

Attack needs to be directed at nuclear facilities.

These are ambiguous answers. Does "damage" mean physical damage? A cyber attack might just shut systems off for a few hours. Would that count? Is the attack on the air defense system guarding a nuclear facility "directed" at the nuclear facility or at the defense installation? You didn't say.