{"data":{"id":"d59435f2-ce1d-4d42-91e4-9d4a1eff0bb4","title":"Budgeted Attack Scheduling for LLM Red-Teaming: The Roles of Static Priors, Semantic Guidance, and Online Feedback","summary":"This paper formalizes budgeted attack scheduling for red-teaming LLMs, where a fixed attempt budget must be spent across a fixed jailbreak attack library. It compares three signals: historical attack success rate priors, semantic guidance from LLMs, and online feedback from earlier queries, using four scheduling strategies across three victim models and three defense settings on GPT-5.2. The authors find that historical priors give a strong start but weaken under defense-induced distribution shift, while online feedback helps most once transferred priors go stale.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2610.25897v1","publishedAt":"2026-10-19T06:54:41.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["jailbreak"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["GPT-5.2"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-19T06:54:41.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["safety"],"aiComponentTargeted":"model","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":["AML.T0054"]}}