Adversarial examples—images subtly altered to mislead AI systems—are used to test the reliability of deep neural networks.