Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 261papers have no tags yet and are not included in filtered results.

Attack technique：Multi-turn escalation Attack surface / entry point：Tool and skill descriptions Attack surface / entry point：Images, audio and video Clear all

Another 261papers do not have category tags yet and are not included in filtered results.

AttacksarXiv 2607.00481Jul 1
研究者提出 SMT 框架，通过模拟审核轨迹越狱函数调用 LLM
提出 SMT 框架，用模拟审核轨迹越狱函数调用 LLM
arXiv
2607.00481
Published
Jul 1
Layer
Prompt layer
Setting
Models and APIs
Attacker
Black-box, White-box
Evaluated models
GPT-4o, GPT-5.4, Qwen3-Max and others7
- AttacksJailbreaks
- TechniqueMulti-turn escalation
Paper analysisRead analysis
AttacksarXiv 2603.10010Feb 18
FERRET：基于扩展的多模态自动化红队测试框架
提出 FERRET 框架，用扩展生成多轮多模态越狱对话
arXiv
2603.10010
Published
Feb 18
Layer
Prompt layer
Setting
Models and APIs
Evaluated models
Llama Maverick, Claude Haiku, GPT-4o
- AttacksJailbreaks
- TechniqueAutomated search
- ComponentVision
Paper analysisRead analysis
AttacksarXiv 2602.14399Feb 16
Multi-turn Adaptive Prompt Attack against Large Vision-Language Models
提出 MAPA 多轮自适应提示攻击，交替文本与视觉动作越狱视觉语言模型
arXiv
2602.14399
Published
Feb 16
Layer
Prompt layer
Setting
Models and APIs
Evaluated models
LLaVA-V1.6-Mistral-7B, Qwen2.5-VL-7B-Instruct, Llama-3.2-Vision-11B-Instruct and others4
- AttacksJailbreaks
- TechniqueMulti-turn escalation
- ComponentVision
Paper analysisRead analysis
AttacksarXiv 2603.20198Feb 5
研究者提出 MM-Plan 多模态越狱框架
提出 MM-Plan 多模态越狱框架，自动规划多轮图像编辑以越狱视觉独占目标
arXiv
2603.20198
Published
Feb 5
Layer
Prompt layer
Setting
Models and APIs
Attacker
Black-box
Evaluated models
Llama-3.2-11B, InternVL3-8B, Qwen3-VL-8B and others8
- AttacksJailbreaks
- TechniqueAutomated search
- ComponentVision
Abstract作者称全局规划能攻破对单轮攻击更稳的前沿 MLLM。
MM-Plan 是面向 Visual Exclusivity 的 black-box 多模态红队方法，并配有人工基准 VE-Safety。
Paper analysisRead analysis
AttacksarXiv 2601.05466Jan 9
Jailbreaking large language models through reinforcement learning with iterative tool disguise attacks
提出 iMIST，用工具伪装和 PPO 迭代越狱大语言模型
arXiv
2601.05466
Published
Jan 9
Layer
Application layer
Setting
AI Agent
Attacker
Black-box
Evaluated models
DeepSeek-V3, Qwen3-32B, GPT-OSS-120B
- AttacksJailbreaks
- TechniqueAutomated search
AbstractiMIST 用工具伪装和在线 PPO 做黑盒越狱，Table I 中 JADES 高于同格基线。
iMIST是黑盒越狱方法：把恶意查询伪装成合法工具调用，再用在线强化学习把响应的有害性分数往上推。
Paper analysisRead analysis
AttacksarXiv 2601.05339Jan 9
多模态大语言模型的多轮越狱攻击与 FragGuard 防御
提出多轮多模态越狱，并用 FragGuard 拦截有害响应
arXiv
2601.05339
Published
Jan 9
Layer
Prompt layer
Setting
Models and APIs
Attacker
Black-box
Evaluated models
LLaVa-1.6 (7B), LLaVa-1.6 (13B), Qwen-2-7B and others5
- DefensesDetection and filtering
- AttacksJailbreaks
- TechniqueMulti-turn escalation
- ComponentVision
Paper analysisRead analysis
AttacksarXiv 2511.13892Nov 18, 2025
论文提出利用图像排版操纵与多轮提示越狱智能交通系统中的 LVLM
提出图像排版操纵与多轮提示越狱，绕过交通场景视觉语言模型安全对齐
arXiv
2511.13892
Published
Nov 18, 2025
Layer
Prompt layer
Setting
Models and APIs
Attacker
Black-box
Evaluated models
LLaVa-1.6, Qwen-2, GPT-4o-mini
- AttacksJailbreaks
- TechniqueCross-modal payloads
- ComponentVision
Paper analysisRead analysis

You have reached the end

AI Safety Daily

Read the latest issueOne issue per day, updated as events develop

All papers

Attack type

Attack technique

Impact

System type

Attacker access

Attack surface / entry point

Layer

System component

研究者提出 SMT 框架，通过模拟审核轨迹越狱函数调用 LLM

FERRET：基于扩展的多模态自动化红队测试框架

Multi-turn Adaptive Prompt Attack against Large Vision-Language Models

研究者提出 MM-Plan 多模态越狱框架

Jailbreaking large language models through reinforcement learning with iterative tool disguise attacks

多模态大语言模型的多轮越狱攻击与 FragGuard 防御

论文提出利用图像排版操纵与多轮提示越狱智能交通系统中的 LVLM