{"total":64,"rows":[{"id":"2504.13203","title":"X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agents","created":"2025-04-15","cited_by_count":125,"area":"agents"},{"id":"2508.16949","title":"Breaking the Exploration Bottleneck: Rubric-Scaffolded Reinforcement Learning for General LLM Reasoning","created":"2025-08-23","cited_by_count":63,"area":"lr"},{"id":"2504.14348","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","created":"2025-04-19","cited_by_count":44,"area":"mllm"},{"id":"2506.14697","title":"AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions","created":"2025-06-17","cited_by_count":38,"area":"mllm"},{"id":"2503.15092","title":"Towards Understanding the Safety Boundaries of DeepSeek Models: Evaluation and Findings","created":"2025-03-19","cited_by_count":27,"area":null},{"id":"2509.03871","title":"A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models","created":"2025-09-04","cited_by_count":25,"area":"lr"},{"id":"2505.06679","title":"T2V-OptJail: Discrete Prompt Optimization for Text-to-Video Jailbreak Attacks","created":"2025-05-10","cited_by_count":21,"area":"diffusion"},{"id":"2601.01592","title":"OpenRT: An Open-Source Red Teaming Framework for Multimodal LLMs","created":"2026-01-04","cited_by_count":21,"area":"mllm"},{"id":"2602.01539","title":"MAGIC: A Co-Evolving Attacker-Defender Adversarial Game for Robust LLM Safety","created":"2026-02-02","cited_by_count":21,"area":"alignment"},{"id":"2603.12644","title":"Uncovering Security Threats and Architecting Defenses in Autonomous Agents: A Case Study of OpenClaw","created":"2026-03-13","cited_by_count":20,"area":"agents"},{"id":"2508.07646","title":"Multi-Turn Jailbreaks Are Simpler Than They Seem","created":"2025-08-11","cited_by_count":17,"area":"safety"},{"id":"2505.12567","title":"A Survey of Attacks on Large Language Models","created":"2025-05-18","cited_by_count":15,"area":"agents"},{"id":"2507.00841","title":"SafeMobile: Chain-level Jailbreak Detection and Automated Evaluation for Multimodal Mobile Agents","created":"2025-07-01","cited_by_count":15,"area":"safety"},{"id":"2504.17130","title":"Steering the CensorShip: Uncovering Representation Vectors for LLM \"Thought\" Control","created":"2025-04-23","cited_by_count":14,"area":"lr"},{"id":"2508.04039","title":"Large Reasoning Models Are Autonomous Jailbreak Agents","created":"2025-08-04","cited_by_count":13,"area":"lr"},{"id":"2503.04833","title":"E$^2$AT: Multimodal Jailbreak Defense via Dynamic Joint Optimization for Multimodal Large Language Models","created":"2025-03-05","cited_by_count":12,"area":"mllm"},{"id":"2506.12430","title":"Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025","created":"2025-06-14","cited_by_count":12,"area":"mllm"},{"id":"2510.01243","title":"Detoxifying Large Language Models via Autoregressive Reward Guided Representation Editing","created":"2025-09-24","cited_by_count":10,"area":"alignment"},{"id":"2505.16241","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","created":"2025-05-22","cited_by_count":8,"area":"lr"},{"id":"2510.02286","title":"Tree-based Dialogue Reinforced Policy Optimization for Red-Teaming Attacks","created":"2025-10-02","cited_by_count":8,"area":"safety"},{"id":"2511.12710","title":"Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs","created":"2025-11-16","cited_by_count":8,"area":"safety"},{"id":"2602.16935","title":"DeepContext: Stateful Real-Time Detection of Multi-Turn Adversarial Intent Drift in LLMs","created":"2026-02-18","cited_by_count":8,"area":"safety"},{"id":"2510.05052","title":"Proactive defense against LLM Jailbreak","created":"2025-10-06","cited_by_count":7,"area":"alignment"},{"id":"2601.03868","title":"What Matters For Safety Alignment?","created":"2026-01-07","cited_by_count":7,"area":"alignment"},{"id":"2601.05445","title":"Knowledge-Driven Multi-Turn Jailbreaking on Large Language Models","created":"2026-01-09","cited_by_count":7,"area":"safety"},{"id":"2603.13435","title":"CtrlAttack: A Unified Attack on World-Model Control in Diffusion Models","created":"2026-03-13","cited_by_count":7,"area":"wm"},{"id":"2505.06579","title":"POISONCRAFT: Practical Poisoning of Retrieval-Augmented Generation for Large Language Models","created":"2025-05-10","cited_by_count":6,"area":"rag"},{"id":"2509.06350","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","created":"2025-09-08","cited_by_count":6,"area":"safety"},{"id":"2510.10013","title":"Path Drift in Large Reasoning Models:How First-Person Commitments Override Safety","created":"2025-10-11","cited_by_count":5,"area":"lr"},{"id":"2510.11570","title":"Strong but Brittle: Simple Attacks Subvert Reasoning-based Safety Guardrails","created":"2025-10-13","cited_by_count":5,"area":"lr"},{"id":"2512.05853","title":"VRSA: Jailbreaking Multimodal Large Language Models through Visual Reasoning Sequential Attack","created":"2025-12-05","cited_by_count":5,"area":"lr"},{"id":"2510.18728","title":"HarmNet: A Framework for Adaptive Multi-Turn Jailbreak Attacks on Large Language Models","created":"2025-10-21","cited_by_count":4,"area":"safety"},{"id":"2511.13127","title":"SPARK: Jailbreaking T2V Models by Synergistically Prompting Auditory and Recontextualized Knowledge","created":"2025-11-17","cited_by_count":4,"area":"safety"},{"id":"2601.21233","title":"Just Ask: Curious Code Agents Reveal System Prompts in Frontier LLMs","created":"2026-01-29","cited_by_count":4,"area":"agents"},{"id":"2603.15684","title":"State-Dependent Safety Failures in Multi-Turn Language Model Interaction","created":"2026-03-15","cited_by_count":4,"area":"alignment"},{"id":"2507.09955","title":"DeepSeek: Paradigm Shifts and Technical Evolution in Large AI Models","created":"2025-07-14","cited_by_count":3,"area":"moe"},{"id":"2507.21540","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","created":"2025-07-29","cited_by_count":3,"area":"lr"},{"id":"2510.17947","title":"PLAGUE: Plug-and-play framework for Lifelong Adaptive Generation of Multi-turn Exploits","created":"2025-10-20","cited_by_count":3,"area":"safety"},{"id":"2602.08874","title":"Do Reasoning LLMs Refuse What They Infer in Long Contexts?","created":"2026-02-09","cited_by_count":3,"area":"lr"},{"id":"2605.11002","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","created":"2026-05-10","cited_by_count":3,"area":"safety"},{"id":"2506.03683","title":"PRJ: Perception-Retrieval-Judgement for Generated Images","created":"2025-06-04","cited_by_count":2,"area":null},{"id":"2508.01272","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","created":"2025-08-02","cited_by_count":2,"area":null},{"id":"2510.01223","title":"Jailbreaking LLMs via Semantically Relevant Nested Scenarios with Targeted Toxic Knowledge","created":"2025-09-22","cited_by_count":2,"area":"safety"},{"id":"2510.15068","title":"Sequential Comics for Jailbreaking Multimodal Large Language Models via Structured Visual Storytelling","created":"2025-10-16","cited_by_count":2,"area":"mllm"},{"id":"2512.18244","title":"Breaking Minds, Breaking Systems: Jailbreaking Large Language Models via Human-like Psychological Manipulation","created":"2025-12-20","cited_by_count":2,"area":"safety"},{"id":"2506.18543","title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models","created":"2025-06-23","cited_by_count":1,"area":"safety"},{"id":"2509.25896","title":"LLaVAShield: Safeguarding Multimodal Multi-Turn Dialogues in Vision-Language Models","created":"2025-09-30","cited_by_count":1,"area":"mllm"},{"id":"2510.17000","title":"Bits Leaked per Query: Information-Theoretic Bounds on Adversarial Attacks against LLMs","created":"2025-10-19","cited_by_count":1,"area":"safety"},{"id":"2601.02670","title":"Break Me If You Can: Self-Jailbreaking of Aligned LLMs via Lexical Insertion Prompting","created":"2026-01-06","cited_by_count":1,"area":"safety"},{"id":"2603.22829","title":"Improving Safety Alignment via Balanced Direct Preference Optimization","created":"2026-03-24","cited_by_count":1,"area":"alignment"},{"id":"2604.11309","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","created":"2026-04-13","cited_by_count":1,"area":"safety"},{"id":"2608.01117","title":"SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks","created":"2026-08-02","cited_by_count":1,"area":"safety"},{"id":"2507.17934","title":"Multimodal Fine-grained Reasoning for Post Quality Evaluation","created":"2025-07-21","cited_by_count":0,"area":null},{"id":"2511.05018","title":"Pluralistic Behavior Suite: Stress-Testing Multi-Turn Adherence to Custom Behavioral Policies","created":"2025-11-07","cited_by_count":0,"area":null},{"id":"2604.04488","title":"A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models","created":"2026-04-06","cited_by_count":0,"area":"mllm"},{"id":"2607.11070","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","created":"2026-07-13","cited_by_count":0,"area":"safety"},{"id":"2608.04565","title":"Breadcrumbing Search Agents","created":"2026-08-05","cited_by_count":0,"area":"agents"},{"id":"2608.10933","title":"SafeCA: Safe Cross-Attention Localization and Regulation for Text-to-Video Jailbreak Defense","created":"2026-08-11","cited_by_count":0,"area":"safety"},{"id":"2609.04022","title":"Representational alignment yields generalizable safety in language models","created":"2026-09-03","cited_by_count":0,"area":"alignment"},{"id":"2609.06612","title":"MechAudit-40: White-Box Auditing across 40 LLM Attack Mechanisms","created":"2026-09-06","cited_by_count":0,"area":"safety"},{"id":"2609.27763","title":"Alignment of LRMs via Counter-Aligned Few-Shot Conversation Exposure","created":"2026-08-16","cited_by_count":0,"area":"lr"},{"id":"2609.31032","title":"TempQ-Jail: Query-Constrained Candidate Ranking for Text-to-Video Jailbreak Attacks","created":"2026-09-25","cited_by_count":0,"area":"safety"},{"id":"2610.01323","title":"TRACE: Trajectory Return Attribution and Contrastive Erasure for Multi-Turn Safety","created":"2026-10-01","cited_by_count":0,"area":"alignment"},{"id":"2610.16305","title":"ATTCK-R: Knowledge-Aware Long-Horizon Jailbreaking for Protected LLMs","created":"2026-10-12","cited_by_count":0,"area":"safety"}],"next_cursor":null}