Anecdoctoring: Automated Red-Teaming Across Language and Place
On the map: LLM safety and security → Prompt injection and agent security
Abstract (arXiv)
Disinformation is among the top risks of generative artificial intelligence (AI) misuse. Global adoption of generative AI necessitates red-teaming evaluations (i.e., systematic adversarial probing) that are robust across diverse languages and cultures, but red-teaming datasets are commonly US- and English-centric. To address this gap, we propose "anecdoctoring", a novel red-teaming approach that automatically generates adversarial prompts across languages and cultures. We collect misinformation claims from fact-checking websites in three languages (English, Spanish, and Hindi) and two geographies (US and India). We then cluster individual claims into broader narratives and characterize the resulting clusters with knowledge graphs, with which we augment an attacker LLM. Our method produces higher attack success rates and offers interpretability benefits relative to few-shot prompting. Results underscore the need for disinformation mitigations that scale globally and are grounded in real-world adversarial misuse.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. Builds on 21 of its 62 references that are in the map. First posted on arXiv 23 Sep 2025.
Builds on
21 of 62 references.
Closest ancestors · 5
Same direction, newest first
- 2024CulturalTeaming: AI-Assisted Interactive Red-Teaming for Challenging LLMs' (Lack of) Multicultural Knowledge10 Apr
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal6 Feb
- 2023AART: AI-Assisted Red-Teaming with Diverse Data Generation for New LLM-powered Applications14 Nov
- 2023MART: Improving LLM Safety with Multi-round Automatic Red-Teaming13 Nov
- 2022Red Teaming Language Models with Language Models7 Feb
Other references · 16
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2023GPT-4 Technical Reportcited by 18,396
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2023Lost in the Middle: How Language Models Use Long Contextscited by 3,455
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2024From Local to Global: A Graph RAG Approach to Query-Focused Summarizationcited by 1,453
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,154
- 2023Unifying Large Language Models and Knowledge Graphs: A Roadmapcited by 668
- 2020TyDi QA: A Benchmark for Information-Seeking Question Answering in Typologically Diverse Languagescited by 488
- 2024Massively Multi-Cultural Knowledge Acquisition & LM Benchmarkingcited by 63
- 2023AI's Regimes of Representation: A Community-centered Study of Text-to-Image Models in South Asiacited by 54
4 more
- 2024Phi-3 Safety Post-Training: Aligning Language Models with a "Break-Fix" Cyclecited by 32
- 2021Filling gaps in trustworthy development of AIcited by 14
- 2022Happenstance: Utilizing Semantic Search to Track Russian State Media Narratives about the Russo-Ukrainian War On Redditcited by 11
- 2023Bridging the Language Gap: Dynamic Learning Strategies for Improving Multilingual Performance in LLMscited by 8
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2024Automated Red Teaming with GOAT: the Generative Offensive Agent Tester
- 2024Red-Teaming for Inducing Societal Bias in Large Language Models
- 2025Learning-Based Automated Adversarial Red-Teaming for Robustness Evaluation of Large Language Models
- 2026Red Teaming LLMs as Socio-Technical Practice: From Exploration and Data Creation to Evaluation
- 2023Explore, Establish, Exploit: Red Teaming Language Models from Scratch
- 2024Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI
- 2025AutoRed: A Free-form Adversarial Prompt Generation Framework for Automated Red Teaming
- 2026CAGE: A Framework for Culturally Adaptive Red-Teaming Benchmark Generation