An AI hacking trick is now being used to split the word ‘funding’ in spam

For two years, invisible Unicode characters have been the neat trick of AI security research. You hide instructions inside them. A language model reads them and does as it is told.