{"total":27,"rows":[{"id":"2311.05608","title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts","created":"2023-11-09","cited_by_count":398,"area":"mllm"},{"id":"2403.09513","title":"AdaShield: Safeguarding Multimodal Large Language Models from Structure-based Attack via Adaptive Shield Prompting","created":"2024-03-14","cited_by_count":125,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2410.06625","title":"ETA: Evaluating Then Aligning Safety of Vision Language Models at Inference Time","created":"2024-10-09","cited_by_count":60,"area":"mllm"},{"id":"2405.17894","title":"White-box Multimodal Jailbreaks Against Large Vision-Language Models","created":"2024-05-28","cited_by_count":59,"area":"mllm"},{"id":"2407.15050","title":"Arondight: Red Teaming Large Vision Language Models with Auto-generated Multi-modal Jailbreak Prompts","created":"2024-07-21","cited_by_count":42,"area":"mllm"},{"id":"2411.00827","title":"IDEATOR: Jailbreaking and Benchmarking Large Vision-Language Models Using Themselves","created":"2024-10-29","cited_by_count":37,"area":"mllm"},{"id":"2406.02575","title":"Cross-Modal Safety Alignment: Is textual unlearning all you need?","created":"2024-05-27","cited_by_count":25,"area":"mllm"},{"id":"2409.18991","title":"Surveying the MLLM Landscape: A Meta-Review of Current Surveys","created":"2024-09-17","cited_by_count":20,"area":"mllm"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2412.18826","title":"RapGuard: Safeguarding Multimodal Large Language Models via Rationale-aware Defensive Prompting","created":"2024-12-25","cited_by_count":19,"area":"mllm"},{"id":"2408.03554","title":"Empirical Analysis of Large Vision-Language Models against Goal Hijacking via Visual Prompt Injection","created":"2024-08-07","cited_by_count":17,"area":"mllm"},{"id":"2412.05892","title":"PBI-Attack: Prior-Guided Bimodal Interactive Black-Box Jailbreak Attack for Toxicity Maximization","created":"2024-12-08","cited_by_count":17,"area":"mllm"},{"id":"2408.13461","title":"Probing the Robustness of Vision-Language Pretrained Models: A Multimodal Adversarial Attack Approach","created":"2024-08-24","cited_by_count":7,"area":"mllm"},{"id":"2504.11038","title":"QAVA: Query-Agnostic Visual Attack to Large Vision-Language Models","created":"2025-04-15","cited_by_count":7,"area":"mllm"},{"id":"2504.03735","title":"Misaligned Roles, Misplaced Images: Structural Input Perturbations Expose Multimodal Alignment Blind Spots","created":"2025-04-01","cited_by_count":4,"area":"mllm"},{"id":"2508.01741","title":"Simulated Ensemble Attack: Transferring Jailbreaks Across Fine-tuned Vision-Language Models","created":"2025-08-03","cited_by_count":4,"area":"mllm"},{"id":"2603.27918","title":"Adversarial Attacks on Multimodal Large Language Models: A Comprehensive Survey","created":"2026-03-30","cited_by_count":4,"area":"mllm"},{"id":"2501.09039","title":"Playing Devil's Advocate: Unmasking Toxicity and Vulnerabilities in Large Vision-Language Models","created":"2025-01-14","cited_by_count":2,"area":"mllm"},{"id":"2607.21617","title":"Do VLMs Read or Rewrite? On Transcription Faithfulness in Vision-Language Models","created":"2026-05-29","cited_by_count":2,"area":"mllm"},{"id":"2509.15478","title":"Red Teaming Multimodal Language Models: Evaluating Harm Across Prompt Modalities and Models","created":"2025-09-18","cited_by_count":1,"area":"mllm"},{"id":"2503.06223","title":"RedDiffuser: Auditing Multimodal Safety Failures in Vision-Language Models via Reinforced Diffusion","created":"2025-03-08","cited_by_count":0,"area":"mllm"},{"id":"2602.04739","title":"Alignment Drift in Multimodal LLMs: A Two-Phase, Longitudinal Evaluation of Harm Across Eight Model Releases","created":"2026-02-04","cited_by_count":0,"area":"mllm"},{"id":"2602.18154","title":"FENCE: A Financial and Multimodal Jailbreak Detection Dataset","created":"2026-02-20","cited_by_count":0,"area":"mllm"},{"id":"2603.14219","title":"Safety-Potential Pruning for Enhancing Safety Prompts Against VLM Jailbreaking Without Retraining","created":"2026-03-15","cited_by_count":0,"area":"mllm"},{"id":"2604.13803","title":"Gaslight, Gatekeep, V1-V3: Early Visual Cortex Alignment Shields Vision-Language Models from Sycophantic Manipulation","created":"2026-04-15","cited_by_count":0,"area":"mllm"},{"id":"2605.23157","title":"Same Model, Different Weakness: How Language and Modality Reshape the Jailbreak Attack Surface in Frontier MLLMs","created":"2026-05-22","cited_by_count":0,"area":"mllm"}],"next_cursor":null}