AnyBreak: Towards Jailbreaking Any T2I Model for Any Concept

Summary

AnyBreak is a jailbreak framework that builds adversarial images through multi-scale progressive semantic alignment, steering text-to-image generation in latent space toward unsafe data manifolds. It transfers malicious concepts from text to image using only clean prompts and adversarial images at inference, in a fully black-box setting. The authors also introduce AnyBreak-V, which adds a compensation term to bypass post-hoc safety checkers, and they report high attack success rates while keeping visual fidelity and semantic consistency.

Topics

• Adversarial machine learning
• Prompt injection and jailbreaks

Related items

• InfoSuppression Is Not Erasure: Mechanistic Analysis and Reactivation Boundaries of Subspace Projection for LoRA Backdoor DefenseSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoHarness Matters: Measuring and Dissecting Security Resilience in Web AgentsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoA Layer-wise Study of How Style Rewriting Breaks the Calibration of Zero-Shot LLM Fake-News DetectorsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoBeyond AUROC: Deployment-Aware Evaluation of Model-Internal Jailbreak DetectorsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoGem5-Shark: Smaug-based Heterogeneous Deep Learning Accelerator Security and Robustness Evaluation and Characterization FrameworkSimilar attack · OpenAlex (peer-reviewed AI security)