The second chapter focuses on specific risks in AI systems. It covers adversarial attacks, model inversion, evasion techniques, and vulnerabilities in AI APIs. Attention is also given to privacy challenges and how AI-specific hardware/software may be exploited. The emphasis is on understanding these risks in order to build more resilient applications.