[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-new-attack-jailbreaks-video-ai-models-via-subtitle-timing":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},5773,"new-attack-jailbreaks-video-ai-models-via-subtitle-timing","New attack jailbreaks video AI models via subtitle timing","TempJail hides jailbreak prompts in video subtitle timing, tricking GPT-5 and Gemini into breaking their own safety rules far more than prior attacks.","Video subtitles can double as a jailbreak lever for AI vision models - not because of what they say, but when they say it.\n\nA team of researchers built TempJail, a black-box attack framework that targets large vision-language models (LVLMs) through the subtitles baked into video. Instead of just embedding harmful text on screen, TempJail arranges dialogue-style subtitle sequences and tunes their timing - how long each line stays up and where it falls in the video - to slip past a model's safety training. The researchers found that jailbreak success depends as much on this temporal scheduling as on the words themselves. Tested against four LVLMs across two datasets, TempJail beat the strongest existing baseline by 53 percentage points in average attack success rate on GPT-5 and by 18 points on Gemini 3.5-Flash.\n\nThat gap matters because most prior video jailbreak research treated timing as an afterthought, focusing on what text appears rather than how it's paced. TempJail treats pacing as the exploit itself, and subtitles make an easy delivery vehicle since they're standard in real video and don't look visually suspicious. As video-capable assistants spread into more products, that's a gap in safety testing most teams probably haven't thought to close.\n\nText and image jailbreaks took years of patching to get even partially under control. Video models are barely shipping, and the cracks are already showing.","[\"jailbreak\",\"vision-language models\",\"ai security\",\"video ai\"]","2026-08-21T04:00:00.000Z","2026-08-21T05:14:42.395Z","2026-08-21T05:14:54.331Z","published",null,[],"security",[26,27,28,29],"jailbreak","vision-language models","ai security","video ai",[31],{"name":32,"url":33},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2608.19737",0,{"sections":36},[37,41,44,49,54,59,64,69,74,79,84,89,94,99],{"name":38,"slug":39,"count":40,"latest_published_at":18},"AI","ai",3300,{"name":42,"slug":24,"count":43,"latest_published_at":18},"Security",449,{"name":45,"slug":46,"count":47,"latest_published_at":48},"Policy","policy",211,"2026-08-20T10:47:43.000Z",{"name":50,"slug":51,"count":52,"latest_published_at":53},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":55,"slug":56,"count":57,"latest_published_at":58},"Hardware","hardware",141,"2026-08-20T11:20:00.000Z",{"name":60,"slug":61,"count":62,"latest_published_at":63},"Consumer Tech","consumer-tech",95,"2026-08-18T16:05:00.000Z",{"name":65,"slug":66,"count":67,"latest_published_at":68},"Science","science",91,"2026-08-20T10:01:48.000Z",{"name":70,"slug":71,"count":72,"latest_published_at":73},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":75,"slug":76,"count":77,"latest_published_at":78},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":80,"slug":81,"count":82,"latest_published_at":83},"Startups","startups",48,"2026-08-20T18:34:26.000Z",{"name":85,"slug":86,"count":87,"latest_published_at":88},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":90,"slug":91,"count":92,"latest_published_at":93},"General","general",33,"2026-08-18T22:18:13.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":98},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":100,"slug":101,"count":102,"latest_published_at":103},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]