Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

Jailbreaks and attacks · Papers

Found 6 papers
Filter1

Attack type

Jailbreaks6

Attack technique

Gradient and representation optimization19Automated search46Multi-turn escalation22Encoding and obfuscation34Role-play and persuasion18Conversation structure manipulation7Reasoning-chain manipulation6Cross-modal payloads33Defense-targeted10

Impact

Harmful content6

System type

Models and APIs6

Attacker access

Black-box5

Attack surface / entry point

User input6

Layer

Prompt layer6

System component

Reasoning chains5
Select any value within a category; different categories must all match. Counts include the other filters you have selected.
Attack technique：Reasoning-chain manipulationTopic: Jailbreaks and attacksClear all
  2. AttacksarXiv 2609.09553

    研究：任意密文攻击前沿大模型无需微调即可越狱

    提出任意字母置换密码越狱，无需微调即可诱导有害输出

    arXiv
    2609.09553
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    Claude Sonnet 4, Claude Sonnet 4.5, Gemini 3 Flash (preview) and others7

    Abstract前沿大模型无需微调即可通过提示词学会字母置换密码，进而绕过分类器与对齐，作者呼吁关注能力提升带来的安全风险。

    Paper analysisRead analysis
  3. AttacksarXiv 2603.10091

    Multi-Stream Perturbation Attack: Breaking the Safety Alignment of Reasoning LLMs through Concurrent Task Interference

    提出多流扰动攻击，交织有害与良性任务绕过思考型 LLM 安全对齐

    arXiv
    2603.10091
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Evaluated models
    Qwen3 1.7B, Qwen3 4B, Qwen3 8B and others11
    Abstract多流扰动用任务交织测试 thinking 模式，作者称它同时冲击内容安全与推理稳定性。

    多流扰动攻击把有害任务与良性任务织进同一提示词，测试 thinking 模式的内容安全与推理稳定性。作者认为，交织多任务会拉长思考，使安全检测面对被打散的有害意图，并可能把推理用于合理化，或陷入崩溃与重复。方法不访问梯度。

    Paper analysisRead analysis
You have reached the end