Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 10 papers

Filter5

Attack type

Jailbreaks3 Model tampering7

Attack technique

Gradient and representation optimization10 Defense-targeted6 Dormant triggers9

Impact

Harmful content8

System type

Models and APIs10 AI Agent6 web agent4

Attacker access

White-box6

Attack surface / entry point

User input19 Web pages and interfaces0 Inter-agent messages0 Images, audio and video22 Weights and gradients10

Layer

Model layer9

Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 232papers have no tags yet and are not included in filtered results.

Attack technique：Gradient and representation optimization System type：Models and APIs Attack surface / entry point：Web pages and interfaces Attack surface / entry point：Inter-agent messages Attack surface / entry point：Weights and gradients Clear all

Another 232papers do not have category tags yet and are not included in filtered results.

AttacksarXiv 2610.05894Oct 5
研究者提出闭环偏见注入攻击
提出闭环激活引导，在扩散语言模型去噪过程中注入定向偏见
arXiv
2610.05894
Published
Oct 5
Layer
Model layer
Setting
Models and APIs
Attacker
Gray-box
Evaluated models
LLaDA-8B-Instruct, Dream-v0-Instruct-7B, LLaDA-MoE-7B-A1B-Instruct
- AttacksModel tampering
- TechniqueGradient and representation optimization
Abstract通过去噪中间概率反馈动态调节残差流转向，证明扩散语言模型在推理服务栈中存在闭环偏见注入脆弱性。
Paper analysisRead analysis
AttacksarXiv 2610.01062Oct 1
Kernelized Activation Steering：将激活引导推广到再生核希尔伯特空间的新框架
提出核化激活引导 KAS，在推理时自适应转向激活以诱导越狱
arXiv
2610.01062
Published
Oct 1
Layer
Model layer
Setting
Models and APIs
Evaluated models
Qwen2.5-7B-Instruct, Gemma-2-9B-IT, Llama-3.1-8B-Instruct and others4
- AttacksModel tampering
- TechniqueGradient and representation optimization
AbstractKAS 用核梯度做局部自适应转向，并在线性核下恢复 DiM。
Kernelized Activation Steering（KAS） 把推理时的激活转向写成核空间中的优化，使更新随当前激活相对源、目标参考集的位置而变化。
Paper analysisRead analysis
AttacksarXiv 2608.07430Aug 8
研究者提出 SN-Guided Diffusion，利用扩散大模型安全神经元实现离线越狱
提出 SN-Guided Diffusion，利用安全神经元实现离线越狱
arXiv
2608.07430
Published
Aug 8
Layer
Prompt layer
Setting
Models and APIs
Attacker
Black-box, White-box
Evaluated models
Qwen2.5-7B-Instruct, LLaDA-8B-Instruct, Dream-Instruct-7B and others15
- AttacksJailbreaks
- TechniqueGradient and representation optimization
Abstract论文揭示了扩散语言模型对自回归安全神经元的继承性，并提出纯离线黑盒越狱框架 SN-Guided Diffusion。
论文系统评估了扩散大语言模型（DLLM）在安全对齐中的双重角色——既作为白盒攻击目标，又作为黑盒越狱生成的对抗工具。
Paper analysisRead analysis
AttacksarXiv 2605.08513May 9
Apple 研究者发现抑制单个神经元即可绕过 LLM 安全对齐
提出单神经元激活干预，抑制拒答神经元或放大概念神经元以绕过安全对齐
arXiv
2605.08513
Published
May 9
Layer
Model layer
Setting
Models and APIs
Attacker
White-box
Evaluated models
Qwen3-1.7B, Qwen3-4B, Qwen3-8B and others11
- AttacksModel tampering
- TechniqueGradient and representation optimization
Abstract作者称大模型安全由拒答门控与概念底座构成，干预单个神经元足以双向击穿对齐，且拒答神经元在预训练阶段已然存在。
Paper analysisRead analysis
AttacksarXiv 2603.10080Mar 10
Amnesia: Adversarial Activation Steering on Specific Semantic Layers of Large Language Models
Propose the Amnesia activation-guided attack to bypass model safety refusal during inference
arXiv
2603.10080
Published
Mar 10
Layer
Model layer
Setting
Models and APIs
Attacker
White-box
Evaluated models
Llama-2-7B-Chat, Llama-3-8B-Instruct, Qwen-7B-Chat
- AttacksModel tampering
- TechniqueGradient and representation optimization
Paper analysisRead analysis
AttacksarXiv 2602.17837Feb 20
TFL: Targeted Bit-Flip Attack against Large Language Models
提出 TFL 定向比特翻转，使选定提示输出虚假答案且无关查询保持正确
arXiv
2602.17837
Published
Feb 20
Layer
Model layer
Setting
Models and APIs
Evaluated models
Qwen3-8B, DeepSeek-R1-Distill-Qwen-14B, LLaMA-3.1-8B-INSTRUCT
- TechniqueGradient and representation optimization
AbstractTFL 在三个 LLM 上搜索权重比特，使指定提示出现目标关键词，并约束无关任务下降。
TFL 是对 LLM 主存权重的目标比特翻转框架：攻击者要让选定提示输出指定虚假答案关键词，同时限制无关查询上的降质。
Paper analysisRead analysis
AttacksarXiv 2602.07107Feb 7
ShallowJail: Guiding Jailbreak Attacks Against Large Language Models
提出 ShallowJail，在推理时用转向向量改写隐藏状态实现越狱
arXiv
2602.07107
Published
Feb 7
Layer
Model layer
Setting
Models and APIs
Evaluated models
Qwen3-4B-Instruct-2507, Qwen2.5-7B-Instruct, Llama-3.1-8B-Instruct
- AttacksJailbreaks
- TechniqueGradient and representation optimization
Paper analysisRead analysis
AttacksarXiv 2602.05444Feb 5
Causal front-door adjustment for robust jailbreak attacks on LLMs
提出 CFA2，用 SAE 定位防御方向并正交化输出权重实现越狱
arXiv
2602.05444
Published
Feb 5
Layer
Model layer
Setting
Models and APIs
Attacker
White-box
Evaluated models
Llama 3.1 8B Instruct, Llama2 7B Chat, Mistral 7B Instruct and others4
- AttacksModel tampering
- TechniqueGradient and representation optimization
- ComponentFine-tuning and open weights
Paper analysisRead analysis
AttacksarXiv 2601.15801Jan 22
Attributing and Exploiting Safety Vectors in Large Language Models via Global Optimization
提出 GOSV，全局优化定位安全注意力头并在推理时重贴激活越狱
arXiv
2601.15801
Published
Jan 22
Layer
Model layer
Setting
Models and APIs
Attacker
White-box
Evaluated models
Llama-2-7b-chat, Llama-3.1-8B-Instruct, Qwen2.5-7B-Instruct and others4
- AttacksModel tampering
- TechniqueGradient and representation optimization
Paper analysisRead analysis
AttacksarXiv 2508.10029Aug 9, 2025
研究者提出 Latent Fusion Jailbreak
提出 Latent Fusion Jailbreak，插值有害与无害隐藏状态实施白盒越狱
arXiv
2508.10029
Published
Aug 9, 2025
Layer
Model layer
Setting
Models and APIs
Attacker
White-box
Evaluated models
Vicuna-7B-v1.5, LLaMA-2-7B-Chat, Guanaco-7B and others5
- AttacksJailbreaks
- TechniqueGradient and representation optimization
Paper analysisRead analysis

You have reached the end

AI Safety Daily

Read the latest issueOne issue per day, updated as events develop