{"total":56,"rows":[{"id":"2408.15221","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","created":"2024-08-27","cited_by_count":151,"area":"safety"},{"id":"2504.13203","title":"X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agents","created":"2025-04-15","cited_by_count":125,"area":"agents"},{"id":"2503.04957","title":"SafeArena: Evaluating the Safety of Autonomous Web Agents","created":"2025-03-06","cited_by_count":102,"area":"agents"},{"id":"2410.10700","title":"LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts","created":"2024-10-14","cited_by_count":86,"area":null},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2502.11054","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","created":"2025-02-16","cited_by_count":64,"area":"lr"},{"id":"2504.17704","title":"Safety in Large Reasoning Models: A Survey","created":"2025-04-24","cited_by_count":64,"area":"lr"},{"id":"2502.19820","title":"Foot-In-The-Door: A Multi-turn Jailbreak for LLMs","created":"2025-02-27","cited_by_count":54,"area":"safety"},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2511.01805","title":"Accumulating Context Changes the Beliefs of Language Models","created":"2025-11-03","cited_by_count":28,"area":null},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2506.14922","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","created":"2025-06-17","cited_by_count":24,"area":"safety"},{"id":"2412.17034","title":"Shaping the Safety Boundaries: Understanding and Defending Against Jailbreaks in Large Language Models","created":"2024-12-22","cited_by_count":23,"area":"safety"},{"id":"2508.07646","title":"Multi-Turn Jailbreaks Are Simpler Than They Seem","created":"2025-08-11","cited_by_count":17,"area":"safety"},{"id":"2505.20259","title":"Lifelong Safety Alignment for Language Models","created":"2025-05-26","cited_by_count":15,"area":"alignment"},{"id":"2504.03174","title":"Multi-lingual Multi-turn Automated Red Teaming for LLMs","created":"2025-04-04","cited_by_count":13,"area":"safety"},{"id":"2508.04039","title":"Large Reasoning Models Are Autonomous Jailbreak Agents","created":"2025-08-04","cited_by_count":13,"area":"lr"},{"id":"2604.10577","title":"The Blind Spot of Agent Safety: How Benign User Instructions Expose Critical Vulnerabilities in Computer-Use Agents","created":"2026-04-12","cited_by_count":12,"area":"agents"},{"id":"2510.01270","title":"Think Twice, Generate Once: Safeguarding by Progressive Self-Reflection","created":"2025-09-29","cited_by_count":11,"area":"lr"},{"id":"2506.09600","title":"Effective Red-Teaming of Policy-Adherent Agents","created":"2025-06-11","cited_by_count":10,"area":"agents"},{"id":"2502.09638","title":"Jailbreaking to Jailbreak","created":"2025-02-09","cited_by_count":9,"area":"safety"},{"id":"2505.17650","title":"Does Chain-of-Thought Reasoning Really Reduce Harmfulness from Jailbreaking?","created":"2025-05-23","cited_by_count":9,"area":"safety"},{"id":"2506.07524","title":"TAI3: Testing Agent Integrity in Interpreting User Intent","created":"2025-06-09","cited_by_count":9,"area":"agents"},{"id":"2410.09097","title":"Recent advancements in LLM Red-Teaming: Techniques, Defenses, and Ethical Considerations","created":"2024-10-09","cited_by_count":8,"area":"safety"},{"id":"2510.02286","title":"Tree-based Dialogue Reinforced Policy Optimization for Red-Teaming Attacks","created":"2025-10-02","cited_by_count":8,"area":"safety"},{"id":"2507.21820","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","created":"2025-07-29","cited_by_count":7,"area":"safety"},{"id":"2601.05445","title":"Knowledge-Driven Multi-Turn Jailbreaking on Large Language Models","created":"2026-01-09","cited_by_count":7,"area":"safety"},{"id":"2409.03131","title":"Well, that escalated quickly: The Single-Turn Crescendo Attack (STCA)","created":"2024-09-04","cited_by_count":5,"area":null},{"id":"2509.14651","title":"MUSE: MCTS-Driven Red Teaming Framework for Enhanced Multi-Turn Dialogue Safety in Large Language Models","created":"2025-09-18","cited_by_count":4,"area":"safety"},{"id":"2510.08859","title":"Pattern Enhanced Multi-Turn Jailbreaking: Exploiting Structural Vulnerabilities in Large Language Models","created":"2025-10-09","cited_by_count":4,"area":"safety"},{"id":"2510.27087","title":"Characterizing Selective Refusal Bias in Large Language Models","created":"2025-10-31","cited_by_count":4,"area":"safety"},{"id":"2601.05742","title":"The Echo Chamber Multi-Turn LLM Jailbreak","created":"2026-01-09","cited_by_count":4,"area":"safety"},{"id":"2509.00973","title":"Clone What You Can't Steal: Black-Box LLM Replication via Logit Leakage and Distillation","created":"2025-08-31","cited_by_count":3,"area":null},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2601.05339","title":"Multi-turn Jailbreaking Attack in Multi-Modal Large Language Models","created":"2026-01-08","cited_by_count":3,"area":"safety"},{"id":"2506.02479","title":"BitBypass: A New Direction in Jailbreaking Aligned Large Language Models with Bitstream Camouflage","created":"2025-06-03","cited_by_count":2,"area":"alignment"},{"id":"2506.17881","title":"GRAF: Multi-turn Jailbreaking via Global Refinement and Active Fabrication","created":"2025-06-22","cited_by_count":2,"area":"safety"},{"id":"2510.03969","title":"How Catastrophic is Your LLM? Certifying Risk in Conversation","created":"2025-10-04","cited_by_count":2,"area":null},{"id":"2510.15017","title":"Active Honeypot Guardrail System: Probing and Confirming Multi-Turn LLM Jailbreaks","created":"2025-10-16","cited_by_count":2,"area":"safety"},{"id":"2512.18244","title":"Breaking Minds, Breaking Systems: Jailbreaking Large Language Models via Human-like Psychological Manipulation","created":"2025-12-20","cited_by_count":2,"area":"safety"},{"id":"2606.20408","title":"NRT-Bench: Benchmarking Multi-Turn Red-Teaming of LLM Operator Agents in Safety-Critical Control Rooms","created":"2026-06-18","cited_by_count":2,"area":"agents"},{"id":"2509.25896","title":"LLaVAShield: Safeguarding Multimodal Multi-Turn Dialogues in Vision-Language Models","created":"2025-09-30","cited_by_count":1,"area":"mllm"},{"id":"2511.03271","title":"Let the Bees Find the Weak Spots: A Path Planning Perspective on Multi-Turn Jailbreak Attacks against LLMs","created":"2025-11-05","cited_by_count":1,"area":"safety"},{"id":"2603.25176","title":"Prompt Attack Detection with LLM-as-a-Judge and Mixture-of-Models","created":"2026-03-26","cited_by_count":1,"area":"safety"},{"id":"2604.11309","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","created":"2026-04-13","cited_by_count":1,"area":"safety"},{"id":"2604.25921","title":"One Word at a Time: Incremental Completion Decomposition Breaks LLM Safety","created":"2026-04-01","cited_by_count":1,"area":"safety"},{"id":"2606.25476","title":"A Red Teaming Framework for Large Language Models: A Case Study on Faithfulness Evaluation","created":"2026-06-24","cited_by_count":1,"area":"safety"},{"id":"2608.01117","title":"SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks","created":"2026-08-02","cited_by_count":1,"area":"safety"},{"id":"2411.16730","title":"\"Moralized\" Multi-Step Jailbreak Prompts: Black-Box Testing of Guardrails in Large Language Models for Verbal Attacks","created":"2024-11-23","cited_by_count":0,"area":"safety"},{"id":"2411.18699","title":"An indicator for effectiveness of text-to-image guardrails utilizing the Single-Turn Crescendo Attack (STCA)","created":"2024-11-27","cited_by_count":0,"area":"safety"},{"id":"2511.05018","title":"Pluralistic Behavior Suite: Stress-Testing Multi-Turn Adherence to Custom Behavioral Policies","created":"2025-11-07","cited_by_count":0,"area":null},{"id":"2512.07059","title":"Replicating TEMPEST at Scale: Multi-Turn Adversarial Attacks Against Trillion-Parameter Frontier Models","created":"2025-12-08","cited_by_count":0,"area":"alignment"},{"id":"2602.00619","title":"Jailbreaking LLMs via Calibration","created":"2026-01-31","cited_by_count":0,"area":"alignment"},{"id":"2607.19292","title":"The safety failures we are not instrumenting: a perspective on hidden safety-critical challenges in modern AI systems","created":"2026-07-21","cited_by_count":0,"area":null},{"id":"2609.00487","title":"EvoFlint: An Evolutionary Atlas of Multi-Turn LLM Vulnerabilities","created":"2026-08-31","cited_by_count":0,"area":"safety"},{"id":"2609.08637","title":"Navigating the digital spectrum: Assessing political bias, stability, and downstream fairness in Large Language Models","created":"2026-09-08","cited_by_count":0,"area":null}],"next_cursor":null}