Adding inaudible perturbations to audio that cause speech recognition systems to transcribe attacker-chosen commands - "Dolphin attacks" using ultrasonic frequencies to issue voice commands to smart assistants - Embedding hidden commands in music or ambient noise