The study proposes a moralized jailbreak attack based on Moral Foundations Theory
Start here
Researchers from Rutgers University and Carnegie Mellon University published the paper "Moral Combat" (arXiv 2610.19587) on October 14, 2026, proposing a moralized jailbreak attack based on moral foundations theory: a multi-agent framework rewrites harmful requests into moral narratives defending fairness, liberty and other values, supplemented with historical arguments; the paper reports test results on benchmarks including AdvBench and HarmBench.
Generated by AI from reports · Updated 6 days ago
Related research
Cited in the reports
- Moral Combat: Exploiting Moral Foundations Theory to Jailbreak LLMsMoral blackmail attacks on large models
arXiv · 2026-10-14 · Deep reading
Papers whose work the reports mention
- The reports mention HarmBenchHarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust RefusalMoral blackmail attacks on large models
arXiv · 2024-02-06 · Deep reading
Storyline
- · 1 reports· Attention36Multi-agent framework jailbreaks LLMs via moral foundations theory
- · 1 reports· Attention33
The study proposes a moralized jailbreak attack based on Moral Foundations TheoryThis event
Progress timeline
- WeChat · Mo'anjuMoral blackmail attacks on large models
Researchers from Rutgers University and Carnegie Mellon University published the paper "Moral Combat: Exploiting Moral Foundations Theory to Jailbreak LLMs" (arXiv 2610.19587) on October 14, 2026, proposing a moralized attack based on Moral Foundations Theory that uses a multi-agent framework to rewrite harmful requests into moral narratives defending fairness, freedom, and similar values, supplemented with historical arguments. The paper reports that on a total of 219 harmful requests across AdvBench, HarmBench, and JailBreakBench, testing GPT-4.1, Grok-3, Llama-4 Maverick, DeepSeek-V3.1, and Phi-4, the single-attempt jailbreak success rate on the AdvBench subset was 66% for GPT-4.1 and 90% for Llama-4 Maverick; on 50 AdvBench requests, after repeating the attack five times, the cumulative success rate reached 92%–100%.
Related discussion
Attention trend
New sources per day
- Nov 6: 1 new sources (1 outlets, 0 accounts)
- Nov 7: 0 new sources (0 outlets, 0 accounts)
- Nov 8: 0 new sources (0 outlets, 0 accounts)
- Nov 9: 0 new sources (0 outlets, 0 accounts)
- Nov 10: 0 new sources (0 outlets, 0 accounts)
- Nov 11: 0 new sources (0 outlets, 0 accounts)
- Nov 12: 0 new sources (0 outlets, 0 accounts)
- Nov 13: 0 new sources (0 outlets, 0 accounts)