{"total":20,"rows":[{"id":"2311.05608","title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts","created":"2023-11-09","cited_by_count":398,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2501.04931","title":"Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency","created":"2025-01-09","cited_by_count":51,"area":"mllm"},{"id":"2502.14744","title":"HiddenDetect: Detecting Jailbreak Attacks against Large Vision-Language Models via Monitoring Hidden States","created":"2025-02-20","cited_by_count":33,"area":"mllm"},{"id":"2410.20971","title":"BlueSuffix: Reinforced Blue Teaming for Vision-Language Models Against Jailbreak Attacks","created":"2024-10-28","cited_by_count":28,"area":"mllm"},{"id":"2406.14859","title":"From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreaking","created":"2024-06-21","cited_by_count":24,"area":"mllm"},{"id":"2502.17832","title":"MM-PoisonRAG: Disrupting Multimodal RAG with Local and Global Poisoning Attacks","created":"2025-02-25","cited_by_count":24,"area":"mllm"},{"id":"2410.00296","title":"VLMGuard: Bootstrapping Malicious Prompt Detectors from Unlabeled Vision-Language Prompts in the Wild","created":"2024-10-01","cited_by_count":18,"area":"mllm"},{"id":"2504.01444","title":"PiCo: Jailbreaking Multimodal Large Language Models via Pictorial Code Contextualization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2510.04257","title":"AgentTypo: Adaptive Typographic Prompt Injection Attacks against Black-box Multimodal Agents","created":"2025-10-05","cited_by_count":4,"area":"mllm"},{"id":"2507.18053","title":"Resource Consumption Red-Teaming for Large Vision-Language Models","created":"2025-07-24","cited_by_count":2,"area":"mllm"},{"id":"2508.09201","title":"Learning to Detect Unseen Jailbreak Attacks in Large Vision-Language Models","created":"2025-08-08","cited_by_count":2,"area":"mllm"},{"id":"2604.17041","title":"SIF: Semantically In-Distribution Fingerprints for Large Vision-Language Models","created":"2026-04-18","cited_by_count":2,"area":"mllm"},{"id":"2510.15430","title":"Learning to Detect Unknown Jailbreak Attacks in Large Vision-Language Models","created":"2025-10-17","cited_by_count":1,"area":"mllm"},{"id":"2602.08136","title":"Robustness of Vision Language Models Against Split-Image Harmful Input Attacks","created":"2026-02-08","cited_by_count":1,"area":"mllm"},{"id":"2606.29649","title":"Resolution Thresholds in VLM Detection of Harmful ASCII Art Across Construction Modes and Languages","created":"2026-06-28","cited_by_count":1,"area":"mllm"},{"id":"2603.15259","title":"Directional Embedding Smoothing for Robust Vision Language Models","created":"2026-03-16","cited_by_count":0,"area":"mllm"},{"id":"2604.06247","title":"SALLIE: Generation-Free Hidden-State Detection of Jailbreaks and Prompt Injections Across Text and Vision","created":"2026-04-06","cited_by_count":0,"area":"mllm"},{"id":"2606.22779","title":"DE-FIVE: Detecting Malicious Image Prompts via Fourier Features and Image Vector Embeddings","created":"2026-06-22","cited_by_count":0,"area":"mllm"},{"id":"2608.07535","title":"Evolving Safety Landscape of Multi-modal Large Language Models: A Survey of Emerging Threats and Safeguards","created":"2026-07-27","cited_by_count":0,"area":"mllm"}],"next_cursor":null}