A single gradient step finds adversarial examples on random two-layers neural networks

Daniely and Schacham [2020] recently showed that gradient descent finds adversarial examples on random undercomplete two-layers ReLU neural networks.