Using a technique called ‘prompt injection, hackers can break AI systems without a deep knowledge of coding.