mlsanityData to 7 Oct 2026

Well, that escalated quickly: The Single-Turn Crescendo Attack (STCA)

arXiv 2409.03131 ↗First posted 4 Sep 2024cs.CR cs.CLcited by 5

Not on the map. Why?

Abstract (arXiv)

This paper introduces a new method for adversarial attacks on large language models (LLMs) called the Single-Turn Crescendo Attack (STCA). Building on the multi-turn crescendo attack method introduced by Russinovich, Salem, and Eldan (2024), which gradually escalates the context to provoke harmful responses, the STCA achieves similar outcomes in a single interaction. By condensing the escalation into a single, well-crafted prompt, the STCA bypasses typical moderation filters that LLMs use to prevent inappropriate outputs. This technique reveals vulnerabilities in current LLMs and emphasizes the importance of stronger safeguards in responsible AI (RAI). The STCA offers a novel method that has not been previously explored.

Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Builds on 3 of its 3 references that are in the map. First posted on arXiv 4 Sep 2024.

Builds on

3 of 3 references.

References · 3

  1. 2024Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attackcited by 364
  2. 2023Multi-step Jailbreaking Privacy Attacks on ChatGPTcited by 320
  3. 2024Multi-Turn Context Jailbreak Attack on Large Language Models From First Principlescited by 54

Built on by

Cited by year

Citing papers per year: 2024: 3; 2025: 2.

5 papers.