Targeted, Universal, and Physical-World Attacks