{"data":{"id":"fe17aafa-040d-4d90-bef0-5c104685c941","title":"ShallowDefend: Harnessing Shallow Safety Alignment for Multi-Turn Defender","summary":"The paper addresses multi-turn jailbreaks, where a harmful request spread across a conversation still succeeds despite safety alignment that concentrates in a model's first few output tokens. It proposes Assess → Decide → Respond, which has the defender commit to an explicit, parseable safety decision before generating a reply, trained with reinforcement learning at the payload turn. Across two model families and fourteen benchmarks, the authors report the strongest multi-turn safety in a controlled comparison, with a modest cost to helpfulness.","solution":"N/A -- no mitigation discussed in source.","labels":["research","security"],"sourceUrl":"https://arxiv.org/abs/2610.40627v1","publishedAt":"2026-10-29T17:56:53.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["jailbreak"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-29T17:56:53.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["safety"],"aiComponentTargeted":"model","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":["AML.T0054"]}}