{"total":123,"rows":[{"id":"2510.09023","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","created":"2025-10-10","cited_by_count":129,"area":"safety"},{"id":"2506.12618","title":"OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics","created":"2025-06-14","cited_by_count":83,"area":"safety"},{"id":"2502.05374","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","created":"2025-02-07","cited_by_count":79,"area":"safety"},{"id":"2410.08827","title":"Do Unlearning Methods Remove Information from Language Model Weights?","created":"2024-10-11","cited_by_count":73,"area":"safety"},{"id":"2410.19278","title":"Applying sparse autoencoders to unlearn knowledge in language models","created":"2024-10-25","cited_by_count":59,"area":"safety"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2412.07097","title":"On Evaluating the Durability of Safeguards for Open-Weight LLMs","created":"2024-12-10","cited_by_count":52,"area":null},{"id":"2410.12777","title":"Meta-Unlearning on Diffusion Models: Preventing Relearning Unlearned Concepts","created":"2024-10-16","cited_by_count":40,"area":"diffusion"},{"id":"2502.05209","title":"Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities","created":"2025-02-03","cited_by_count":39,"area":null},{"id":"2410.04332","title":"Gradient Routing: Masking Gradients to Localize Computation in Neural Networks","created":"2024-10-06","cited_by_count":34,"area":null},{"id":"2503.01854","title":"A Comprehensive Survey of Machine Unlearning Techniques for Large Language Models","created":"2025-02-22","cited_by_count":34,"area":"safety"},{"id":"2502.12520","title":"SafeEraser: Enhancing Safety in Multimodal Large Language Models through Multimodal Machine Unlearning","created":"2025-02-18","cited_by_count":32,"area":"mllm"},{"id":"2504.01550","title":"Representation Bending for Large Language Model Safety","created":"2025-04-02","cited_by_count":30,"area":"safety"},{"id":"2411.12103","title":"Does Unlearning Truly Unlearn? A Black Box Evaluation of LLM Unlearning Methods","created":"2024-11-18","cited_by_count":26,"area":"safety"},{"id":"2502.15910","title":"Modality-Aware Neuron Pruning for Unlearning in Multimodal Large Language Models","created":"2025-02-21","cited_by_count":26,"area":"mllm"},{"id":"2506.08164","title":"BLUR: A Bi-Level Optimization Approach for LLM Unlearning","created":"2025-06-09","cited_by_count":23,"area":"safety"},{"id":"2504.08192","title":"SAEs Can Improve Unlearning: Dynamic Sparse Autoencoder Guardrails for Precision Unlearning in LLMs","created":"2025-04-11","cited_by_count":22,"area":"safety"},{"id":"2508.00910","title":"Cyber-Zero: Training Cybersecurity Agents without Runtime","created":"2025-07-29","cited_by_count":22,"area":"agents"},{"id":"2506.01339","title":"Invariance Makes LLM Unlearning Resilient Even to Unanticipated Downstream Fine-Tuning","created":"2025-06-02","cited_by_count":21,"area":"safety"},{"id":"2412.06370","title":"Exploring Memorization and Copyright Violation in Frontier LLMs: A Study of the New York Times v. OpenAI 2023 Lawsuit","created":"2024-12-09","cited_by_count":18,"area":null},{"id":"2410.09591","title":"Unlearn and Burn: Adversarial Machine Unlearning Requests Destroy Model Accuracy","created":"2024-10-12","cited_by_count":17,"area":"safety"},{"id":"2502.01083","title":"Tool Unlearning for Tool-Augmented LLMs","created":"2025-02-03","cited_by_count":17,"area":"agents"},{"id":"2506.07171","title":"RULE: Reinforcement UnLEarning Achieves Forget-Retain Pareto Optimality","created":"2025-06-08","cited_by_count":16,"area":"safety"},{"id":"2410.08074","title":"Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Models","created":"2024-10-10","cited_by_count":15,"area":"diffusion"},{"id":"2412.06966","title":"Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Research","created":"2024-12-09","cited_by_count":15,"area":"safety"},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2506.15699","title":"BLUR: A Benchmark for LLM Unlearning Robust to Forget-Retain Overlap","created":"2025-05-28","cited_by_count":15,"area":"safety"},{"id":"2508.18370","title":"Training Language Model Agents to Find Vulnerabilities with CTF-Dojo","created":"2025-08-25","cited_by_count":15,"area":"agents"},{"id":"2410.15153","title":"Evaluating Deep Unlearning in Large Language Models","created":"2024-10-19","cited_by_count":14,"area":"safety"},{"id":"2504.04626","title":"Exact Unlearning of Finetuning Data via Model Merging at Scale","created":"2025-04-06","cited_by_count":14,"area":"safety"},{"id":"2601.21571","title":"Shaping capabilities with token-level data filtering","created":"2026-01-29","cited_by_count":13,"area":null},{"id":"2504.10185","title":"LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarks","created":"2025-04-14","cited_by_count":12,"area":"safety"},{"id":"2505.22310","title":"From Dormant to Deleted: Tamper-Resistant Unlearning Through Weight-Space Regularization","created":"2025-05-28","cited_by_count":12,"area":"safety"},{"id":"2501.11739","title":"Episodic memory in AI agents poses risks that should be studied and mitigated","created":"2025-01-20","cited_by_count":11,"area":null},{"id":"2505.16559","title":"CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning","created":"2025-05-22","cited_by_count":11,"area":"safety"},{"id":"2505.22586","title":"Precise In-Parameter Concept Erasure in Large Language Models","created":"2025-05-28","cited_by_count":11,"area":null},{"id":"2506.06278","title":"Distillation Robustifies Unlearning","created":"2025-06-06","cited_by_count":11,"area":"safety"},{"id":"2506.14003","title":"Unlearning Isn't Invisible: Detecting Unlearning Traces in LLMs from Model Outputs","created":"2025-06-16","cited_by_count":11,"area":"safety"},{"id":"2509.02820","title":"Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs","created":"2025-09-02","cited_by_count":11,"area":"safety"},{"id":"2512.05648","title":"Beyond Data Filtering: Knowledge Localization for Capability Removal in LLMs","created":"2025-12-05","cited_by_count":11,"area":"safety"},{"id":"2505.12186","title":"Self-Destructive Language Model","created":"2025-05-18","cited_by_count":10,"area":"safety"},{"id":"2508.09853","title":"STREAM (ChemBio): A Standard for Transparently Reporting Evaluations in AI Model Reports","created":"2025-08-13","cited_by_count":10,"area":null},{"id":"2501.19202","title":"Improving LLM Unlearning Robustness via Random Perturbations","created":"2025-01-31","cited_by_count":9,"area":"safety"},{"id":"2505.14536","title":"Breaking Bad Tokens: Detoxification of LLMs Using Sparse Autoencoders","created":"2025-05-20","cited_by_count":9,"area":"mechinterp"},{"id":"2506.12097","title":"UCD: Unlearning in LLMs via Contrastive Decoding","created":"2025-06-12","cited_by_count":9,"area":"safety"},{"id":"2505.18384","title":"Dynamic Risk Assessments for Offensive Cybersecurity Agents","created":"2025-05-23","cited_by_count":8,"area":"agents"},{"id":"2506.00688","title":"Existing Large Language Model Unlearning Evaluations Are Inconclusive","created":"2025-05-31","cited_by_count":8,"area":"safety"},{"id":"2507.03236","title":"On Jailbreaking Quantized Language Models Through Fault Injection Attacks","created":"2025-07-04","cited_by_count":8,"area":"alignment"},{"id":"2410.06704","title":"PII-Scope: A Comprehensive Study on Training Data PII Extraction Attacks in LLMs","created":"2024-10-09","cited_by_count":7,"area":null},{"id":"2412.06619","title":"Copyright-Protected Language Generation via Adaptive Model Fusion","created":"2024-12-09","cited_by_count":7,"area":null},{"id":"2502.12430","title":"Position: Bridge the Gaps between Machine Unlearning and AI Regulation","created":"2025-02-18","cited_by_count":7,"area":"safety"},{"id":"2505.23270","title":"Does Machine Unlearning Truly Remove Knowledge?","created":"2025-05-29","cited_by_count":7,"area":"safety"},{"id":"2508.00161","title":"Watch the Weights: Unsupervised monitoring and control of fine-tuned LLMs","created":"2025-07-31","cited_by_count":7,"area":"safety"},{"id":"2504.14452","title":"ParaPO: Aligning Language Models to Reduce Verbatim Reproduction of Pre-training Data","created":"2025-04-20","cited_by_count":6,"area":"alignment"},{"id":"2506.17279","title":"Step-by-Step Reasoning Attack: Revealing 'Erased' Knowledge in Large Language Models","created":"2025-06-14","cited_by_count":6,"area":"lr"},{"id":"2502.19982","title":"Erasing Without Remembering: Implicit Knowledge Forgetting in Large Language Models","created":"2025-02-27","cited_by_count":5,"area":"safety"},{"id":"2505.24379","title":"Unlearned but Not Forgotten: Data Extraction after Exact Unlearning in LLM","created":"2025-05-30","cited_by_count":5,"area":"safety"},{"id":"2506.10236","title":"Prompt Attacks Reveal Superficial Knowledge Removal in Unlearning Methods","created":"2025-06-11","cited_by_count":5,"area":"safety"},{"id":"2512.19025","title":"The Erasure Illusion: Stress-Testing the Generalization of LLM Forgetting Evaluation","created":"2025-12-22","cited_by_count":5,"area":"safety"},{"id":"2506.12484","title":"Robust LLM Unlearning with MUDMAN: Meta-Unlearning with Disruption Masking And Normalization","created":"2025-06-14","cited_by_count":4,"area":"safety"},{"id":"2506.17265","title":"SUA: Stealthy Multimodal Large Language Model Unlearning Attack","created":"2025-06-10","cited_by_count":4,"area":"mllm"},{"id":"2507.11128","title":"What Should LLMs Forget? Quantifying Personal Data in LLMs for Right-to-Be-Forgotten Requests","created":"2025-07-15","cited_by_count":4,"area":"safety"},{"id":"2508.15449","title":"Reliable Unlearning Harmful Information in LLMs with Metamorphosis Representation Projection","created":"2025-08-21","cited_by_count":4,"area":"safety"},{"id":"2509.22483","title":"OFMU: Optimization-Driven Framework for Machine Unlearning","created":"2025-09-26","cited_by_count":4,"area":"safety"},{"id":"2510.00761","title":"Downgrade to Upgrade: Optimizer Simplification Enhances Robustness in LLM Unlearning","created":"2025-10-01","cited_by_count":4,"area":"safety"},{"id":"2510.25117","title":"A Survey on Unlearning in Large Language Models","created":"2025-10-29","cited_by_count":4,"area":"safety"},{"id":"2604.07962","title":"Is your algorithm unlearning or untraining?","created":"2026-04-09","cited_by_count":4,"area":"safety"},{"id":"2508.17233","title":"Module-Aware Parameter-Efficient Machine Unlearning on Transformers","created":"2025-08-24","cited_by_count":3,"area":"safety"},{"id":"2509.11816","title":"Collapse of Irrelevant Representations (CIR) Ensures Robust and Non-Disruptive LLM Unlearning","created":"2025-09-15","cited_by_count":3,"area":"safety"},{"id":"2601.15111","title":"Auditing Language Model Unlearning via Information Decomposition","created":"2026-01-21","cited_by_count":3,"area":"safety"},{"id":"2601.21283","title":"DUET: Distilled LLM Unlearning from an Efficiently Contextualized Teacher","created":"2026-01-29","cited_by_count":3,"area":"safety"},{"id":"2606.00105","title":"Visual-Noise Guided In-Context Distillation for Multimodal Large Language Model Unlearning","created":"2026-05-26","cited_by_count":3,"area":"mllm"},{"id":"2606.27379","title":"Position: The Term \"Machine Unlearning\" Is Overused in LLMs","created":"2026-05-08","cited_by_count":3,"area":"safety"},{"id":"2607.08077","title":"Modular Pretraining Enables Access Control","created":"2026-07-09","cited_by_count":3,"area":null},{"id":"2502.15836","title":"Soft Token Attacks Cannot Reliably Audit Unlearning in Large Language Models","created":"2025-02-20","cited_by_count":2,"area":"safety"},{"id":"2503.00917","title":"AMUN: Adversarial Machine UNlearning","created":"2025-03-02","cited_by_count":2,"area":"safety"},{"id":"2510.07626","title":"LLM Unlearning Under the Microscope: A Full-Stack View on Methods and Metrics","created":"2025-10-08","cited_by_count":2,"area":"safety"},{"id":"2510.09007","title":"LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Data","created":"2025-10-10","cited_by_count":2,"area":"safety"},{"id":"2510.12200","title":"HackWorld: Evaluating Computer-Use Agents on Exploiting Web Application Vulnerabilities","created":"2025-10-14","cited_by_count":2,"area":"agents"},{"id":"2601.04278","title":"From Domains to Instances: Dual-Granularity Data Synthesis for LLM Unlearning","created":"2026-01-07","cited_by_count":2,"area":"synth"},{"id":"2602.02824","title":"CALIBURN: Self-Calibrated LLM Unlearning Alignment","created":"2026-02-02","cited_by_count":2,"area":"safety"},{"id":"2602.22562","title":"Layer-Targeted Multilingual Knowledge Erasure in Large Language Models","created":"2026-02-26","cited_by_count":2,"area":"safety"},{"id":"2605.06901","title":"Reflections and New Directions for Human-Centered Large Language Models","created":"2026-05-07","cited_by_count":2,"area":null},{"id":"2502.01472","title":"FALCON: Fine-grained Activation Manipulation by Contrastive Orthogonal Unalignment for Large Language Model","created":"2025-02-03","cited_by_count":1,"area":"alignment"},{"id":"2504.06407","title":"Understanding Machine Unlearning Through the Lens of Mode Connectivity","created":"2025-04-08","cited_by_count":1,"area":"safety"},{"id":"2508.20443","title":"Towards Mitigating Excessive Forgetting in LLM Unlearning via Entanglement-Guidance with Proxy Constraint","created":"2025-08-28","cited_by_count":1,"area":"safety"},{"id":"2509.20230","title":"Beyond Sharp Minima: Robust LLM Unlearning via Feedback-Guided Multi-Point Optimization","created":"2025-09-24","cited_by_count":1,"area":"safety"},{"id":"2601.21702","title":"Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilities","created":"2026-01-29","cited_by_count":1,"area":"safety"},{"id":"2602.03379","title":"Rethinking Benign Relearning: Syntax as the Hidden Driver of Unlearning Failures","created":"2026-02-03","cited_by_count":1,"area":"safety"},{"id":"2602.23391","title":"Detoxifying LLMs via Representation Erasure-Based Preference Optimization","created":"2026-02-24","cited_by_count":1,"area":"alignment"},{"id":"2603.00823","title":"A Comprehensive Evaluation of LLM Unlearning Robustness under Multi-Turn Interaction","created":"2026-02-28","cited_by_count":1,"area":"safety"},{"id":"2605.08765","title":"Unlearners Can Lie: Evaluating and Improving Honesty in LLM Unlearning","created":"2026-05-09","cited_by_count":1,"area":"safety"},{"id":"2605.11685","title":"Robust LLM Unlearning Against Relearning Attacks: The Minor Components in Representations Matter","created":"2026-05-12","cited_by_count":1,"area":"safety"},{"id":"2605.26526","title":"Open-Weight LLM Fine-Tuning Defenses are Susceptible to Simple Attacks","created":"2026-05-26","cited_by_count":1,"area":"safety"},{"id":"2608.04692","title":"Suppression Sticks, Locality Is Fragile: A Closed-Loop Target-and-Control Audit of Task-Vector Negation in VLA Policies","created":"2026-08-05","cited_by_count":1,"area":"vla"},{"id":"2608.11408","title":"Measure, Don't Optimize: Forecasting Recovery in LLM Unlearning","created":"2026-08-11","cited_by_count":1,"area":"safety"},{"id":"2601.22601","title":"Lethe: Principled Dual-Stream Update for Persistent Knowledge Erasure in Federated Unlearning","created":"2026-01-30","cited_by_count":0,"area":"safety"},{"id":"2602.01703","title":"$\\textbf{AGT$^{AO}$}$: Robust and Stabilized LLM Unlearning via Adversarial Gating Training with Adaptive Orthogonality","created":"2026-02-02","cited_by_count":0,"area":"safety"},{"id":"2603.00133","title":"You Don't Need All That Attention: Surgical Memorization Mitigation in Text-to-Image Diffusion Models","created":"2026-02-23","cited_by_count":0,"area":"diffusion"},{"id":"2604.00324","title":"The Persistent Vulnerability of Aligned AI Systems","created":"2026-03-31","cited_by_count":0,"area":null}],"next_cursor":"100"}