{"total":68,"rows":[{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2502.14881","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","created":"2025-02-14","cited_by_count":67,"area":"mllm"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2411.16721","title":"Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks","created":"2024-11-23","cited_by_count":48,"area":"mllm"},{"id":"2503.20823","title":"Playing the Fool: Jailbreaking LLMs and Multimodal LLMs with Out-of-Distribution Strategy","created":"2025-03-26","cited_by_count":44,"area":"alignment"},{"id":"2411.00827","title":"IDEATOR: Jailbreaking and Benchmarking Large Vision-Language Models Using Themselves","created":"2024-10-29","cited_by_count":37,"area":"mllm"},{"id":"2502.10794","title":"Distraction is All You Need for Multimodal Large Language Model Jailbreaking","created":"2025-02-15","cited_by_count":36,"area":"mllm"},{"id":"2412.15206","title":"AutoTrust: Benchmarking Trustworthiness in Large Vision Language Models for Autonomous Driving","created":"2024-12-19","cited_by_count":35,"area":"lr"},{"id":"2505.16916","title":"Backdoor Cleaning without External Guidance in MLLM Fine-tuning","created":"2025-05-22","cited_by_count":35,"area":"mllm"},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2411.09259","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","created":"2024-11-14","cited_by_count":32,"area":"safety"},{"id":"2409.08087","title":"Securing Large Language Models: Addressing Bias, Misinformation, and Prompt Attacks","created":"2024-09-12","cited_by_count":26,"area":"safety"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2510.26418","title":"Chain-of-Thought Hijacking","created":"2025-10-30","cited_by_count":16,"area":"lr"},{"id":"2501.15269","title":"Mirage in the Eyes: Hallucination Attack on Multi-modal Large Language Models with Only Attention Sink","created":"2025-01-25","cited_by_count":15,"area":"mllm"},{"id":"2410.03857","title":"You Know What I'm Saying: Jailbreak Attack via Implicit Reference","created":"2024-10-04","cited_by_count":14,"area":"safety"},{"id":"2504.19373","title":"Doxing via the Lens: Revealing Location-related Privacy Leakage on Multi-modal Large Reasoning Models","created":"2025-04-27","cited_by_count":14,"area":null},{"id":"2506.12430","title":"Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025","created":"2025-06-14","cited_by_count":12,"area":"mllm"},{"id":"2511.12982","title":"SafeGRPO: Self-Rewarded Multimodal Safety Alignment via Rule-Governed Policy Optimization","created":"2025-11-17","cited_by_count":12,"area":"lr"},{"id":"2508.05087","title":"JPS: Jailbreak Multimodal Large Language Models with Collaborative Visual Perturbation and Textual Steering","created":"2025-08-07","cited_by_count":11,"area":"mllm"},{"id":"2510.00181","title":"CHAI: Command Hijacking against embodied AI","created":"2025-09-30","cited_by_count":11,"area":null},{"id":"2512.06589","title":"OmniSafeBench-MM: A Unified Benchmark and Toolbox for Multimodal Jailbreak Attack-Defense Evaluation","created":"2025-12-06","cited_by_count":11,"area":"safety"},{"id":"2405.20775","title":"Medical MLLM is Vulnerable: Cross-Modality Jailbreak and Mismatched Attacks on Medical Multimodal Large Language Models","created":"2024-05-26","cited_by_count":10,"area":"mllm"},{"id":"2503.19134","title":"MIRAGE: Multimodal Immersive Reasoning and Guided Exploration for Red-Team Jailbreak Attacks","created":"2025-03-24","cited_by_count":10,"area":"lr"},{"id":"2508.05775","title":"Guardians and Offenders: A Survey on Harmful Content Generation and Safety Mitigation of LLM","created":"2025-08-07","cited_by_count":9,"area":"alignment"},{"id":"2512.20168","title":"Odysseus: Jailbreaking Commercial Multimodal LLM-integrated Systems via Dual Steganography","created":"2025-12-23","cited_by_count":8,"area":"mllm"},{"id":"2411.07559","title":"Zer0-Jack: A Memory-efficient Gradient-based Jailbreaking Method for Black-box Multi-modal Large Language Models","created":"2024-11-12","cited_by_count":7,"area":"mllm"},{"id":"2505.04673","title":"REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLM","created":"2025-05-07","cited_by_count":5,"area":null},{"id":"2506.07153","title":"Mind the Web: The Security of Web Use Agents","created":"2025-06-08","cited_by_count":5,"area":"agents"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2503.11750","title":"Making Every Step Effective: Jailbreaking Large Vision-Language Models Through Hierarchical KV Equalization","created":"2025-03-14","cited_by_count":4,"area":"mllm"},{"id":"2508.01741","title":"Simulated Ensemble Attack: Transferring Jailbreaks Across Fine-tuned Vision-Language Models","created":"2025-08-03","cited_by_count":4,"area":"mllm"},{"id":"2508.19445","title":"On Surjectivity of Neural Networks: Can you elicit any behavior from your model?","created":"2025-08-26","cited_by_count":4,"area":null},{"id":"2602.01025","title":"Toward Universal and Transferable Jailbreak Attacks on Vision-Language Models","created":"2026-02-01","cited_by_count":4,"area":"mllm"},{"id":"2604.06950","title":"Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation","created":"2026-04-08","cited_by_count":4,"area":"mllm"},{"id":"2512.02973","title":"Contextual Image Attack: How Visual Context Exposes Multimodal Safety Vulnerabilities","created":"2025-12-02","cited_by_count":3,"area":"mllm"},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2508.09201","title":"Learning to Detect Unseen Jailbreak Attacks in Large Vision-Language Models","created":"2025-08-08","cited_by_count":2,"area":"mllm"},{"id":"2508.10955","title":"Empowering Multimodal LLMs with External Tools: A Comprehensive Survey","created":"2025-08-14","cited_by_count":2,"area":"mllm"},{"id":"2509.21401","title":"JaiLIP: Jailbreaking Vision-Language Models via Loss Guided Image Perturbation","created":"2025-09-24","cited_by_count":2,"area":"lr"},{"id":"2602.10148","title":"Red-teaming the Multimodal Reasoning: Jailbreaking Vision-Language Models via Cross-modal Entanglement Attacks","created":"2026-02-09","cited_by_count":2,"area":"lr"},{"id":"2412.16555","title":"Divide and Conquer: A Hybrid Strategy Defeats Multimodal Large Language Models","created":"2024-12-21","cited_by_count":1,"area":"mllm"},{"id":"2508.09230","title":"Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems","created":"2025-08-12","cited_by_count":1,"area":"mllm"},{"id":"2510.17759","title":"VERA-V: Variational Inference Framework for Jailbreaking Vision-Language Models","created":"2025-10-20","cited_by_count":1,"area":"lr"},{"id":"2511.08367","title":"Why Does Weak-OOD Help? A Further Step Towards Understanding Jailbreaking VLMs","created":"2025-11-11","cited_by_count":1,"area":"safety"},{"id":"2511.12861","title":"From Perception to Reasoning: Deep Thinking Empowers Multimodal Large Language Models","created":"2025-11-17","cited_by_count":1,"area":"lr"},{"id":"2601.03416","title":"GAMBIT: A Gamified Jailbreak Framework for Multimodal Large Language Models","created":"2026-01-06","cited_by_count":1,"area":"lr"},{"id":"2602.00420","title":"Text is All You Need for Vision-Language Model Jailbreaking","created":"2026-01-31","cited_by_count":1,"area":"mllm"},{"id":"2602.14399","title":"Multi-Turn Adaptive Prompting Attack on Large Vision-Language Models","created":"2026-02-16","cited_by_count":1,"area":"mllm"},{"id":"2606.16193","title":"Cascaded Sparse Autoencoders Learn Multi-Level Visual Concepts in Multimodal LLMs","created":"2026-06-15","cited_by_count":1,"area":"mllm"},{"id":"2606.26566","title":"Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models","created":"2026-06-25","cited_by_count":1,"area":"mllm"},{"id":"2505.18212","title":"Towards medical AI misalignment: a preliminary study","created":"2025-05-22","cited_by_count":0,"area":"safety"},{"id":"2507.20704","title":"Text2VLM: Adapting Text-Only Datasets to Evaluate Alignment Training in Visual Language Models","created":"2025-07-28","cited_by_count":0,"area":"mllm"},{"id":"2510.21214","title":"Enhanced MLLM Black-Box Jailbreaking Attacks and Defenses","created":"2025-10-24","cited_by_count":0,"area":"safety"},{"id":"2603.16897","title":"EEG-Based Brain-LLM Interface for Human Preference Aligned Generation","created":"2026-03-03","cited_by_count":0,"area":null},{"id":"2604.08846","title":"Dictionary-Aligned Concept Control for Safeguarding Multimodal LLMs","created":"2026-04-10","cited_by_count":0,"area":"mllm"},{"id":"2604.08881","title":"Targeted Interpretable Safety Neuron Enhancement for Multilingual Vision-Language Large Models","created":"2026-04-10","cited_by_count":0,"area":"alignment"},{"id":"2605.05709","title":"Conceal, Reconstruct, Jailbreak: Exploiting the Reconstruction-Concealment Tradeoff in MLLMs","created":"2026-05-07","cited_by_count":0,"area":"mllm"},{"id":"2605.09443","title":"Through the Lens of Character: Resolving Modality-Role Interference in Multimodal Role-Playing Agent","created":"2026-05-10","cited_by_count":0,"area":"mllm"},{"id":"2605.25194","title":"Localize and Neutralize: Gradient-guided Token Suppression against Visual Prompt Injection Attack","created":"2026-05-24","cited_by_count":0,"area":"safety"},{"id":"2607.21151","title":"V-DEAL: Diagnosing Video Safety De-Calibration as an Understanding-Refusal Coupling Failure","created":"2026-07-23","cited_by_count":0,"area":"alignment"},{"id":"2609.08637","title":"Navigating the digital spectrum: Assessing political bias, stability, and downstream fairness in Large Language Models","created":"2026-09-08","cited_by_count":0,"area":null},{"id":"2609.10613","title":"Understanding In-Context Multimodal Jailbreaks via Posterior Reweighting","created":"2026-09-08","cited_by_count":0,"area":"mllm"},{"id":"2609.36121","title":"Render Before Reading: Visual Rendering as a Prompt Injection Defense","created":"2026-09-28","cited_by_count":0,"area":"safety"},{"id":"2610.10358","title":"Open-MMUnlearning: Unifying Methods and Evaluation for MLLM Unlearning","created":"2026-10-07","cited_by_count":0,"area":"mllm"},{"id":"2610.14094","title":"Scenes as an Attack Surface: Uncovering Scene-Grounded Safety Failures in MLLMs","created":"2026-10-08","cited_by_count":0,"area":"mllm"}],"next_cursor":null}