Jailbreak
-
Prompt Injection vs Jailbreak: Two Different Attacks on LLMs
Prompt injection and jailbreak get conflated constantly, but they hit different layers and need different defenses. Here is how to tell them apart.
-
Best LLM Red Team Tools: Garak, PyRIT, and Promptfoo
The best LLM red team tools are compared across attack coverage, multi-turn depth, CI integration, strengths, limitations, and ideal use cases.
-
LLM Jailbreak Techniques Explained: 7 Attack Families
A technical breakdown of LLM jailbreak techniques by attack category, from role-play bypasses to multilingual exploits and multi-turn escalation.
-
Crescendo Multi-Turn Jailbreaks: Why Defenses Miss Them
Crescendo multi-turn jailbreaks evade per-message defenses by exploiting conversation context, requiring session-level classification and monitoring.
-
How Jailbreak Benchmarks Measure Success: JailbreakBench
How to read a jailbreak attack-success-rate: the behaviour set, attacker harness, judge and target that decide the number, and why two papers disagree.
-
Many-Shot vs. Single-Shot Jailbreaks: Long-Context Risks
Single-shot jailbreaks compress the entire attack into one prompt; many-shot jailbreaks exploit the model's in-context learning.
-
Encoding and Obfuscation Jailbreaks: The Filter-Model Gap
Encoding and obfuscation jailbreaks exploit representation gaps between content filters and LLMs; normalization and decoding can help detect them.
-
LLM Jailbreak Taxonomy 2026: How the Techniques Cluster
Six years of jailbreak research has produced a messy literature. This taxonomy organizes working techniques by the behavioral property each one exploits.