Insurers unsuccessfully argued Merck’s $1.4B in losses following NotPetya cyberattack fell under wartime exclusion.