{"total":14,"rows":[{"id":"2602.06854","title":"SEMA: Simple yet Effective Learning for Multi-Turn Jailbreak Attacks","created":"2026-02-06","cited_by_count":12,"area":"safety"},{"id":"2510.02286","title":"Tree-based Dialogue Reinforced Policy Optimization for Red-Teaming Attacks","created":"2025-10-02","cited_by_count":8,"area":"safety"},{"id":"2512.01353","title":"The Trojan Knowledge: Bypassing Commercial LLM Guardrails via Harmless Prompt Weaving and Adaptive Tree Search","created":"2025-12-01","cited_by_count":7,"area":"safety"},{"id":"2601.22636","title":"Statistical Estimation of Adversarial Risk in Large Language Models under Best-of-N Sampling","created":"2026-01-30","cited_by_count":6,"area":"safety"},{"id":"2605.08778","title":"Not All Turns Matter: Credit Assignment for Multi-Turn Jailbreaking","created":"2026-05-09","cited_by_count":3,"area":"safety"},{"id":"2603.14278","title":"Activation Surgery: Jailbreaking White-box LLMs without Touching the Prompt","created":"2026-03-15","cited_by_count":2,"area":"safety"},{"id":"2511.08367","title":"Why Does Weak-OOD Help? A Further Step Towards Understanding Jailbreaking VLMs","created":"2025-11-11","cited_by_count":1,"area":"safety"},{"id":"2605.00553","title":"Stable-GFlowNet: Toward Diverse and Robust LLM Red-Teaming via Contrastive Trajectory Balance","created":"2026-05-01","cited_by_count":1,"area":"safety"},{"id":"2607.18056","title":"An Early Warning of Emerging Biosecurity Risks in Frontier LLMs","created":"2026-07-20","cited_by_count":1,"area":"safety"},{"id":"2605.07032","title":"A Systematic Investigation of RL-Jailbreaking in LLMs","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2605.13411","title":"Model-Agnostic Lifelong LLM Safety via Externalized Attack-Defense Co-Evolution","created":"2026-05-13","cited_by_count":0,"area":"safety"},{"id":"2606.03647","title":"All you need to break LLMs are Black-Box, Adapting, Efficient, Transferable, Harmful, Applicable ... Attacks","created":"2026-06-02","cited_by_count":0,"area":"safety"},{"id":"2607.11070","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","created":"2026-07-13","cited_by_count":0,"area":"safety"},{"id":"2610.05282","title":"Red-TTT: Test-Time Training for Automated Jailbreaking Large Language Models","created":"2026-10-04","cited_by_count":0,"area":"safety"}],"next_cursor":null}