D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting 事件

D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting arXiv:2606.02640v1 Announce Type: cross Abstract: Multi-turn jailbreak attacks pose a growing threat to large language model (LLM) safety because they exploit feedback from auxiliary judge models to iteratively refine prompts toward harmful goals. Existing defenses largely detect or block unsafe content at individual turns or at the final response, leaving the judge-driven refinement loop intact and allowing a