{"total":69,"rows":[{"id":"2311.05608","title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts","created":"2023-11-09","cited_by_count":398,"area":"mllm"},{"id":"2307.14539","title":"Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models","created":"2023-07-26","cited_by_count":273,"area":"mllm"},{"id":"2309.11751","title":"How Robust is Google's Bard to Adversarial Image Attacks?","created":"2023-09-21","cited_by_count":183,"area":"mllm"},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2403.09792","title":"Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models","created":"2024-03-14","cited_by_count":136,"area":"mllm"},{"id":"2411.10414","title":"Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations","created":"2024-11-15","cited_by_count":129,"area":"mllm"},{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2312.03777","title":"On the Robustness of Large Multimodal Models Against Image Adversarial Attacks","created":"2023-12-06","cited_by_count":92,"area":"mllm"},{"id":"2411.15296","title":"MME-Survey: A Comprehensive Survey on Evaluation of Multimodal LLMs","created":"2024-11-22","cited_by_count":72,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2403.02910","title":"ImgTrojan: Jailbreaking Vision-Language Models with ONE Image","created":"2024-03-05","cited_by_count":57,"area":"mllm"},{"id":"2501.04931","title":"Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency","created":"2025-01-09","cited_by_count":51,"area":"mllm"},{"id":"2310.02224","title":"Can Language Models be Instructed to Protect Personal Information?","created":"2023-10-03","cited_by_count":46,"area":"mllm"},{"id":"2407.15050","title":"Arondight: Red Teaming Large Vision Language Models with Auto-generated Multi-modal Jailbreak Prompts","created":"2024-07-21","cited_by_count":42,"area":"mllm"},{"id":"2502.05151","title":"Transforming Science with Large Language Models: A Survey on AI-assisted Scientific Discovery, Experimentation, Content Generation, and Evaluation","created":"2025-02-07","cited_by_count":42,"area":"mllm"},{"id":"2506.14697","title":"AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions","created":"2025-06-17","cited_by_count":38,"area":"mllm"},{"id":"2502.10794","title":"Distraction is All You Need for Multimodal Large Language Model Jailbreaking","created":"2025-02-15","cited_by_count":36,"area":"mllm"},{"id":"2406.02575","title":"Cross-Modal Safety Alignment: Is textual unlearning all you need?","created":"2024-05-27","cited_by_count":25,"area":"mllm"},{"id":"2406.14859","title":"From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreaking","created":"2024-06-21","cited_by_count":24,"area":"mllm"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2401.15071","title":"From GPT-4 to Gemini and Beyond: Assessing the Landscape of MLLMs on Generalizability, Trustworthiness and Causality through Four Modalities","created":"2024-01-26","cited_by_count":19,"area":"mllm"},{"id":"2405.08317","title":"SpeechGuard: Exploring the Adversarial Robustness of Multimodal Large Language Models","created":"2024-05-14","cited_by_count":18,"area":"mllm"},{"id":"2409.13174","title":"Manipulation Facing Threats: Evaluating Physical Vulnerabilities in End-to-End Vision Language Action Models","created":"2024-09-20","cited_by_count":18,"area":"mllm"},{"id":"2503.11832","title":"Safety Mirage: How Spurious Correlations Undermine VLM Safety Fine-Tuning and Can Be Mitigated by Machine Unlearning","created":"2025-03-14","cited_by_count":16,"area":"mllm"},{"id":"2405.04403","title":"Learning To See But Forgetting To Follow: Visual Instruction Tuning Makes LLMs More Prone To Jailbreak Attacks","created":"2024-05-07","cited_by_count":15,"area":"mllm"},{"id":"2409.07353","title":"Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks","created":"2024-09-11","cited_by_count":15,"area":"mllm"},{"id":"2407.14971","title":"Sim-CLIP: Unsupervised Siamese Adversarial Fine-Tuning for Robust and Semantically-Rich Vision-Language Models","created":"2024-07-20","cited_by_count":12,"area":"mllm"},{"id":"2503.04833","title":"E$^2$AT: Multimodal Jailbreak Defense via Dynamic Joint Optimization for Multimodal Large Language Models","created":"2025-03-05","cited_by_count":12,"area":"mllm"},{"id":"2402.03757","title":"The Instinctive Bias: Spurious Images lead to Illusion in MLLMs","created":"2024-02-06","cited_by_count":11,"area":"mllm"},{"id":"2405.20775","title":"Medical MLLM is Vulnerable: Cross-Modality Jailbreak and Mismatched Attacks on Medical Multimodal Large Language Models","created":"2024-05-26","cited_by_count":10,"area":"mllm"},{"id":"2502.14604","title":"Noisy Test-Time Adaptation in Vision-Language Models","created":"2025-02-20","cited_by_count":10,"area":"mllm"},{"id":"2505.01050","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models","created":"2025-05-02","cited_by_count":10,"area":"mllm"},{"id":"2504.10000","title":"Do We Really Need Curated Malicious Data for Safety Alignment in Multi-modal Large Language Models?","created":"2025-04-14","cited_by_count":9,"area":"mllm"},{"id":"2505.11926","title":"SafeVid: Toward Safety Aligned Video Large Multimodal Models","created":"2025-05-17","cited_by_count":9,"area":"mllm"},{"id":"2410.07571","title":"How Does Vision-Language Adaptation Impact the Safety of Vision Language Models?","created":"2024-10-10","cited_by_count":8,"area":"mllm"},{"id":"2504.01444","title":"PiCo: Jailbreaking Multimodal Large Language Models via Pictorial Code Contextualization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2502.07987","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","created":"2025-02-11","cited_by_count":6,"area":"mllm"},{"id":"2505.17455","title":"Towards Evaluating Proactive Risk Awareness of Multimodal Language Models","created":"2025-05-23","cited_by_count":6,"area":"mllm"},{"id":"2511.20196","title":"Towards Benign Memory Forgetting for Selective Multimodal Large Language Model Unlearning","created":"2025-11-25","cited_by_count":6,"area":"mllm"},{"id":"2405.20090","title":"Transfer Attack for Bad and Good: Explain and Boost Adversarial Transferability across Multimodal Large Language Models","created":"2024-05-30","cited_by_count":5,"area":"mllm"},{"id":"2410.01438","title":"The Great Contradiction Showdown: How Jailbreak and Stealth Wrestle in Vision-Language Models?","created":"2024-10-02","cited_by_count":4,"area":"mllm"},{"id":"2411.04291","title":"Layer-wise Alignment: Examining Safety Alignment Across Image Encoder Layers in Vision Language Models","created":"2024-11-06","cited_by_count":4,"area":"mllm"},{"id":"2602.01025","title":"Toward Universal and Transferable Jailbreak Attacks on Vision-Language Models","created":"2026-02-01","cited_by_count":4,"area":"mllm"},{"id":"2603.13385","title":"VisualLeakBench: Auditing the Fragility of Large Vision-Language Models against PII Leakage and Social Engineering","created":"2026-03-11","cited_by_count":4,"area":"mllm"},{"id":"2603.27918","title":"Adversarial Attacks on Multimodal Large Language Models: A Comprehensive Survey","created":"2026-03-30","cited_by_count":4,"area":"mllm"},{"id":"2605.00583","title":"Jailbreaking Vision-Language Models Through the Visual Modality","created":"2026-05-01","cited_by_count":4,"area":"mllm"},{"id":"2501.19017","title":"Benchmarking Gaslighting Negation Attacks Against Multimodal Large Language Models","created":"2025-01-31","cited_by_count":3,"area":"mllm"},{"id":"2504.01308","title":"Safeguarding Vision-Language Models: Mitigating Vulnerabilities to Gaussian Noise in Perturbation-based Attacks","created":"2025-04-02","cited_by_count":3,"area":"mllm"},{"id":"2509.04403","title":"Self-adaptive Dataset Construction for Real-World Multimodal Safety Scenarios","created":"2025-09-04","cited_by_count":2,"area":"mllm"},{"id":"2509.12521","title":"Phi: Preference Hijacking in Multi-modal Large Language Models at Inference Time","created":"2025-09-15","cited_by_count":2,"area":"mllm"},{"id":"2502.20504","title":"A Thousand Words or An Image: Studying the Influence of Persona Modality in Multimodal LLMs","created":"2025-02-27","cited_by_count":1,"area":"mllm"},{"id":"2503.11742","title":"Safe Vision-Language Models via Unsafe Weights Manipulation","created":"2025-03-14","cited_by_count":1,"area":"mllm"},{"id":"2505.21556","title":"Benign-to-Toxic Jailbreaking: Inducing Harmful Responses from Harmless Prompts","created":"2025-05-26","cited_by_count":1,"area":"mllm"},{"id":"2506.09067","title":"Enhancing the Safety of Medical Vision-Language Models by Synthetic Demonstrations","created":"2025-06-08","cited_by_count":1,"area":"mllm"},{"id":"2506.13205","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","created":"2025-06-16","cited_by_count":1,"area":"mllm"},{"id":"2510.09699","title":"VisualDAN: Exposing Vulnerabilities in VLMs with Visual-Driven DAN Commands","created":"2025-10-09","cited_by_count":1,"area":"mllm"},{"id":"2606.26566","title":"Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models","created":"2026-06-25","cited_by_count":1,"area":"mllm"},{"id":"2507.13761","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","created":"2025-07-18","cited_by_count":0,"area":"mllm"},{"id":"2601.17082","title":"Do VLMs Have a Moral Backbone? A Study on the Fragile Morality of Vision-Language Models","created":"2026-01-23","cited_by_count":0,"area":"mllm"},{"id":"2603.06600","title":"FuzzingRL: Reinforcement Fuzz-Testing for Revealing VLM Failures","created":"2026-02-17","cited_by_count":0,"area":"mllm"},{"id":"2604.10299","title":"Seeing No Evil: Blinding Large Vision-Language Models to Safety Instructions via Adversarial Attention Hijacking","created":"2026-04-11","cited_by_count":0,"area":"mllm"},{"id":"2605.04261","title":"Laundering AI Authority with Adversarial Examples","created":"2026-05-05","cited_by_count":0,"area":"mllm"},{"id":"2605.05709","title":"Conceal, Reconstruct, Jailbreak: Exploiting the Reconstruction-Concealment Tradeoff in MLLMs","created":"2026-05-07","cited_by_count":0,"area":"mllm"},{"id":"2605.07399","title":"GPO-V: Jailbreak Diffusion Vision Language Model by Global Probability Optimization","created":"2026-05-08","cited_by_count":0,"area":"mllm"},{"id":"2606.02111","title":"Jailbreaking Multimodal Large Language Models using Multi-Clip Video","created":"2026-06-01","cited_by_count":0,"area":"mllm"},{"id":"2606.23892","title":"REALM: A Unified Red-Teaming Benchmark for Physical-World VLMs","created":"2026-06-22","cited_by_count":0,"area":"mllm"},{"id":"2607.02961","title":"Overloading Large Vision-Language Models for Jailbreaking","created":"2026-07-03","cited_by_count":0,"area":"mllm"},{"id":"2607.16442","title":"One Modality to Forget Them All: Enhancing Cross-Modal Unlearning in Vision-Language Models","created":"2026-07-17","cited_by_count":0,"area":"mllm"},{"id":"2610.05637","title":"Visual Grounding Safety in Vision-Language Models","created":"2026-10-05","cited_by_count":0,"area":"mllm"}],"next_cursor":null}