Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 17 papers

Filter3

Attack type

Attack technique

Gradient and representation optimization24 Automated search46 Multi-turn escalation22 Encoding and obfuscation37 Role-play and persuasion17 Conversation structure manipulation9 Reasoning-chain manipulation6 Cross-modal payloads32 Defense-targeted9 Dormant triggers4 Selection manipulation0

Impact

Harmful content17 Unauthorized actions4 Data and privacy leaks4 Output manipulation16 Availability and reliability3

System type

Models and APIs17

Attacker access

Black-box12

Attack surface / entry point

User input16

Layer

Prompt layer16

Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 265papers have no tags yet and are not included in filtered results.

Attack technique：Role-play and persuasion Attack technique：Selection manipulation Impact：Harmful content Clear all

Another 265papers do not have category tags yet and are not included in filtered results.

AttacksarXiv 2609.31664Sep 15
什么驱动方言越狱？对表层形式、文化框架与策略库的消融研究
消融比较方言越狱中表层形式、文化框架与策略库的作用
arXiv
2609.31664
Published
Sep 15
Layer
Prompt layer
Setting
Models and APIs
Attacker
Black-box
Evaluated models
GPT-4o, DeepSeek-Reasoner, DeepSeek-Chat
- AttacksJailbreaks
- TechniqueAutomated search
Paper analysisRead analysis
AttacksarXiv 2609.02414Sep 2
Blueprint 框架用世界观模拟与 18 个影响因子提升多轮越狱成功率
提出多轮越狱框架 BLUEPRINT，用世界观模拟与心理因素诱导有害输出
arXiv
2609.02414
Published
Sep 2
Layer
Prompt layer
Setting
Models and APIs
Attacker
Black-box
Evaluated models
Qwen3-Next-80B, DeepSeek-V3.2, GLM-4.7 and others6
- AttacksJailbreaks
- TechniqueMulti-turn escalation
AbstractBLUEPRINT 解耦多轮越狱策略与情境模拟，揭示任务具象化是摆脱拒绝的核心机制，为多轮安全防御提供新视角。
BLUEPRINT 是一个将因子化社会影响力策略空间与跨轮世界观模拟解耦的多轮大语言模型安全评测框架。
Paper analysisRead analysis
AttacksarXiv 2607.23496Jul 26
Concept2Scenario：用 SAE 概念归因发现可迁移的越狱场景
提出 Concept2Scenario，借助内部概念归因发现可迁移的越狱场景
arXiv
2607.23496
Published
Jul 26
Layer
Prompt layer
Setting
Models and APIs
Attacker
White-box, Black-box
Evaluated models
Qwen3.5-9B, Llama-3.1-8B, Ministral-3-8B and others6
- AttacksJailbreaks
- TechniqueGradient and representation optimization
Abstract该研究从表征空间因果归因揭示场景削弱拒绝的机制，发现可复用脆弱场景先验，提升多模型黑盒越狱效能与探索速度。
Paper analysisRead analysis
Evaluation and benchmarksarXiv 2606.29602Jun 29
六款主流 LLM 在多语言与混淆提示注入攻击下的实证评估
评测多语言与编码混淆提示下模型生成钓鱼与键盘记录内容的遵从
arXiv
2606.29602
Published
Jun 29
Layer
Prompt layer
Setting
Models and APIs
Evaluated models
DeepSeek-V3.2, Gemini 2.5 Flash, GPT-5 Mini and others6
- AttacksJailbreaks
- TechniqueEncoding and obfuscation
Paper analysisRead analysis
Evaluation and benchmarksarXiv 2606.02630May 30
MultiTurnPSB
构建 MultiTurnPSB，评测四轮医疗越狱与分类器输入防御
arXiv
2606.02630
Published
May 30
Layer
Prompt layer
Setting
Models and APIs
Evaluated models
GPT-4.1-mini, Claude Sonnet 4.5
- DefensesDetection and filtering
- AttacksJailbreaks
- TechniqueMulti-turn escalation
- ComponentGuardrails and judges
Abstract多轮攻击加剧医疗模型风险，分类器干预有效但受高误报率制约。
MultiTurnPSB 针对患者端医疗大模型在持续交互中的安全风险，构建了包含三种攻击模态的四轮对抗评测基准。
Paper analysisRead analysis
AttacksarXiv 2606.00150May 29
Persona Attack：通过增量记忆注入越狱大语言模型
提出 Persona Attack，分步写入对话记忆指令以越狱
arXiv
2606.00150
Published
May 29
Layer
Prompt layer
Setting
Models and APIs
Attacker
Black-box
Evaluated models
GPT-4o, Llama-3.2-3B-Instruct, ChatGPT-4o and others5
- AttacksJailbreaks
- TechniqueMulti-turn escalation
Paper analysisRead analysis
AttacksarXiv 2604.04842Apr 7
不伤害：通过基于人格的客户模拟攻击揭示心理咨询中 LLM 的隐藏漏洞
提出 PCSA，用人设多轮模拟咨询来访者以诱导有害共情回复
arXiv
2604.04842
Published
Apr 7
Layer
Prompt layer
Setting
Models and APIs
Evaluated models
Llama-3.1-8B, Llama-3.1-70B, GPT-3.5-Turbo and others8
- AttacksJailbreaks
- TechniqueRole-play and persuasion
Paper analysisRead analysis
AttacksarXiv 2604.02652Apr 3
强化学习对齐的泛化局限
提出复合越狱，叠对比结构、权威人设与自评饱和指令层级
arXiv
2604.02652
Published
Apr 3
Layer
Prompt layer
Setting
Models and APIs
Evaluated models
OpenAI gpt-oss-20b
- AttacksJailbreaks
- TechniqueRole-play and persuasion
- ComponentReasoning chains
Paper analysisRead analysis
Evaluation and benchmarksarXiv 2604.01444Apr 2
烹饪风险：大语言模型食品安全风险的基准测试与降低
提出 FoodGuardBench 与护栏 FoodGuard-4B，评测并降低食品危害越狱
arXiv
2604.01444
Published
Apr 2
Layer
Prompt layer
Setting
Models and APIs
Attacker
Black-box
Evaluated models
Claude-3.7-Sonnet, GPT-4o, GPT-4.1 and others10
- DefensesDetection and filtering
- AttacksJailbreaks
- TechniqueAutomated search
- ComponentGuardrails and judges
Paper analysisRead analysis
AttacksarXiv 2603.16192Mar 17
针对大语言模型越狱攻击的结构化语义遮蔽
提出 S2C 越狱，用情境改写、切分和线索伪装推迟有害意图整合
arXiv
2603.16192
Published
Mar 17
Layer
Prompt layer
Setting
Models and APIs
Attacker
Black-box
Evaluated models
Llama3.3-70B-Instruct, DeepSeek-r1, DeepSeek-v3 and others16
- AttacksJailbreaks
- TechniqueEncoding and obfuscation
Paper analysisRead analysis
AttacksarXiv 2603.15684Mar 15
多轮语言模型交互中的状态依赖安全失效
提出 STAR 多轮角色扮演框架，利用对话状态演化绕过安全对齐
arXiv
2603.15684
Published
Mar 15
Layer
Prompt layer
Setting
Models and APIs
Attacker
Black-box
Evaluated models
GPT-4o, Claude 3.5 Sonnet, Gemini 2.0-Flash and others5
- AttacksJailbreaks
- TechniqueMulti-turn escalation
Paper analysisRead analysis
AttacksarXiv 2602.00388Jan 31
Safer by Diffusion, Broken by Context: The Safety Dividend and Failure Modes of Diffusion LLMs
提出黑盒 context nesting，用结构化补全任务嵌套有害请求越狱扩散 LLM
arXiv
2602.00388
Published
Jan 31
Layer
Prompt layer
Setting
Models and APIs
Attacker
Black-box
Evaluated models
LLaDA-8B-Instruct, LLaDA-1.5, Dream-v0-Instruct-7B and others5
- AttacksJailbreaks
- TechniqueRole-play and persuasion
Abstract去噪抑制多种越狱。
作者把 D-LLM 相对 AR-LLM 越狱的稳健性称为 safety blessing，并把 context nesting 当作它的 black-box 失效方式。
Paper analysisRead analysis
AttacksarXiv 2601.23255Jan 31
研究者提出音频叙事越狱攻击
提出音频叙事越狱，以嗓音投递风格绕过端到端语音模型拒答
arXiv
2601.23255
Published
Jan 31
Layer
Prompt layer
Setting
Models and APIs
Attacker
Black-box
Evaluated models
GPT-4o Realtime, Gemini 2.0 Flash, Qwen2.5-Omni-7B
- AttacksJailbreaks
- TechniqueRole-play and persuasion
- ComponentAudio
Paper analysisRead analysis
AttacksarXiv 2601.20903Jan 28
ICON: Efficient Multi-Turn Jailbreak Attacks via Intention-Context Coupling
提出 ICON 多轮越狱，用意图-上下文先验生成攻击序列
arXiv
2601.20903
Published
Jan 28
Layer
Prompt layer
Setting
Models and APIs
Attacker
Black-box
Evaluated models
Llama-4-Maverick-Instruct, Llama-3.1-405B-Instruct, Qwen-Max-2025-01-25 and others11
- AttacksJailbreaks
- TechniqueMulti-turn escalation
Paper analysisRead analysis
AttacksarXiv 2601.22169Jan 19
In Vino Veritas and Vulnerabilities：用醉酒语言诱导检验 LLM 安全
用醉酒语言诱导改编对话模型并评测越狱与隐私泄露
arXiv
2601.22169
Published
Jan 19
Layer
Training and data layer
Setting
Models and APIs
Evaluated models
LLaMA2-7B, LLaMA3-8B, Mistral-7B and others5
- AttacksJailbreaks
- TechniqueRole-play and persuasion
- ComponentFine-tuning and open weights
Abstract醉酒语言诱导在五个 LLM 上抬高越狱与部分隐私错误，作者将其视为攻击向量。
作者把醉酒语言当作攻击向量，检验把 LLM 适配成醉酒发短信的模式后，越狱和情境隐私是否变差。动机是人类醉酒时的失范与泄密，以及 LLM 模拟人设的能力。
Paper analysisRead analysis
AttacksarXiv 2510.17904Oct 19, 2025
BreakFun：用模拟代码执行中的对象实例化越狱 LLM
提出 BreakFun ，用模拟代码执行中的对象实例化越狱模型
arXiv
2510.17904
Published
Oct 19, 2025
Layer
Prompt layer
Setting
Models and APIs
Attacker
Black-box
Evaluated models
GPT-4.1 Mini, Gemini 2.5 Flash, Claude-3.5 Sonnet and others16
- AttacksJailbreaks
- TechniqueRole-play and persuasion
Paper analysisRead analysis
AttacksarXiv 2505.12287May 18, 2025
多语言越狱提示词对闭源大语言模型的攻击评估：GPT-4o、DeepSeek-R1、Gemini-1.5-Pro 与 Qwen-Max
提出四段越狱提示，评测中英提示对闭源模型的绕过效果
arXiv
2505.12287
Published
May 18, 2025
Layer
Prompt layer
Setting
Models and APIs
Attacker
Black-box
Evaluated models
GPT-4o, DeepSeek-R1, Gemini-1.5-Pro and others4
- AttacksJailbreaks
- TechniqueRole-play and persuasion
Paper analysisRead analysis

You have reached the end

AI Safety Daily

Read the latest issueOne issue per day, updated as events develop