{"total":24,"rows":[{"id":"2607.19829","title":"DARWIN: Evolving Jailbreak Adversary and Guardrail for LLM Safety Evaluation and Protection","created":"2026-07-22","cited_by_count":6,"area":"safety"},{"id":"2608.16465","title":"JailbreakSkill: Scaling Automated Red-Teaming with Reusable and Ever-Evolving Skills","created":"2026-08-17","cited_by_count":3,"area":"safety"},{"id":"2607.18639","title":"Mark, Don't Erase: Token Inoculation for Dual-Use Knowledge in LLMs","created":"2026-07-21","cited_by_count":2,"area":"safety"},{"id":"2605.20641","title":"Trusted Weights, Treacherous Optimizations? Optimization-Triggered Backdoor Attacks on LLMs","created":"2026-05-20","cited_by_count":1,"area":"safety"},{"id":"2606.04483","title":"Voices Across Registers: Corpus-Conditioned Vernacular Jailbreaks against Aligned LLMs via Fanfiction Subgenres","created":"2026-06-03","cited_by_count":1,"area":"safety"},{"id":"2606.29887","title":"SafePyramid: A Hierarchical Benchmark for In-context Policy Guardrailing","created":"2026-06-29","cited_by_count":1,"area":"safety"},{"id":"2607.18056","title":"An Early Warning of Emerging Biosecurity Risks in Frontier LLMs","created":"2026-07-20","cited_by_count":1,"area":"safety"},{"id":"2608.05430","title":"Robust Context-Aware Detection of Malicious Instructions in Text","created":"2026-08-05","cited_by_count":1,"area":"safety"},{"id":"2608.22335","title":"Register Shifts Break LLM Safety: A Bengali Benchmark with Culturally Grounded Harms","created":"2026-08-23","cited_by_count":1,"area":"safety"},{"id":"2605.25510","title":"The Age of Curiosity Meets the Age of AI: Benchmarking Child Safety in Large Language Models","created":"2026-05-25","cited_by_count":0,"area":"safety"},{"id":"2606.11817","title":"Grammar-Constrained Decoding Can Jailbreak LLMs into Generating Malicious Code","created":"2026-06-10","cited_by_count":0,"area":"safety"},{"id":"2607.11070","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","created":"2026-07-13","cited_by_count":0,"area":"safety"},{"id":"2607.20435","title":"Making Open-Source Text LLM Watermarks Durable Against Merging","created":"2026-05-11","cited_by_count":0,"area":"safety"},{"id":"2608.27844","title":"EvoHarmBench: Breaking Content Moderation with Iterative Human-Like Evasion","created":"2026-08-28","cited_by_count":0,"area":"safety"},{"id":"2608.28361","title":"GRACE:Gradient-guided Coreset Selection for LLM Unlearning","created":"2026-08-28","cited_by_count":0,"area":"safety"},{"id":"2608.29030","title":"Learning to Follow In-Context Watermark Instructions via Self-Distillation","created":"2026-08-29","cited_by_count":0,"area":"safety"},{"id":"2608.30703","title":"SingProbe Technical Report","created":"2026-08-31","cited_by_count":0,"area":"safety"},{"id":"2609.06540","title":"SRD-GUARD: A Defense Framework of LLMs via Semantic Rewriting and Joint Multi-Model Scoring for Latent Intent Exposure","created":"2026-09-06","cited_by_count":0,"area":"safety"},{"id":"2609.06966","title":"MOLE: Detecting Insider Threats in AI Agents","created":"2026-09-07","cited_by_count":0,"area":"safety"},{"id":"2609.29045","title":"The Tokens Remember: When Tokenization Bypasses Knowledge Editing and Unlearning","created":"2026-09-24","cited_by_count":0,"area":"safety"},{"id":"2609.37218","title":"Beyond Semantic Narrowing: Robust and Efficient LLM Watermarking with Hamming Neighborhoods","created":"2026-09-29","cited_by_count":0,"area":"safety"},{"id":"2609.39882","title":"LLM Persona Unlearning","created":"2026-09-30","cited_by_count":0,"area":"safety"},{"id":"2610.08840","title":"Beyond the Sycophancy Score: How Task, Model, and Pressure Shape LLM Yielding","created":"2026-09-30","cited_by_count":0,"area":"safety"},{"id":"2610.11112","title":"False Claims, Credible Images: A Red-Teaming Benchmark for Commercial Image Generators","created":"2026-10-08","cited_by_count":0,"area":"safety"}],"next_cursor":null}