US short of options to punish North Korea for serious cyberattack