Well, that escalated quickly: The Single-Turn Crescendo Attack (STCA)
Not on the map. Why?
Abstract (arXiv)
This paper introduces a new method for adversarial attacks on large language models (LLMs) called the Single-Turn Crescendo Attack (STCA). Building on the multi-turn crescendo attack method introduced by Russinovich, Salem, and Eldan (2024), which gradually escalates the context to provoke harmful responses, the STCA achieves similar outcomes in a single interaction. By condensing the escalation into a single, well-crafted prompt, the STCA bypasses typical moderation filters that LLMs use to prevent inappropriate outputs. This technique reveals vulnerabilities in current LLMs and emphasizes the importance of stronger safeguards in responsible AI (RAI). The STCA offers a novel method that has not been previously explored.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Builds on 3 of its 3 references that are in the map. First posted on arXiv 4 Sep 2024.
Builds on
3 of 3 references.
References · 3
Built on by
Citing papers per year: 2024: 3; 2025: 2.
5 papers.
- 2024Breaking ReAct Agents: Foot-in-the-Door Attack Will Get You Incited by 21
- 2024Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAIcited by 14
- 2025Layered Chain-of-Thought Prompting for Multi-Agent LLM Systems: A Comprehensive Approach to Explainable Large Language Modelscited by 10
- 2025A Representation Engineering Perspective on the Effectiveness of Multi-Turn Jailbreakscited by 10
- 2024An indicator for effectiveness of text-to-image guardrails utilizing the Single-Turn Crescendo Attack (STCA)cited by 0
- 2025A Representation Engineering Perspective on the Effectiveness of Multi-Turn Jailbreaks29 Jun 2025
- 2025Layered Chain-of-Thought Prompting for Multi-Agent LLM Systems: A Comprehensive Approach to Explainable Large Language Models29 Jan 2025
- 2024An indicator for effectiveness of text-to-image guardrails utilizing the Single-Turn Crescendo Attack (STCA)27 Nov 2024
- 2024Breaking ReAct Agents: Foot-in-the-Door Attack Will Get You In22 Oct 2024
- 2024Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI23 Sep 2024