[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-new-jailbreak-framework-exposes-weak-spots-in-voice-ai-systems":10,"sections":40},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":35,"feedback":39,"feedback_at":22,"cost_usd":39,"total_tokens":39},5752,"new-jailbreak-framework-exposes-weak-spots-in-voice-ai-systems","New Jailbreak Framework Exposes Weak Spots in Voice AI Systems","Researchers built an adaptive jailbreak tool that fools both speech-to-text and end-to-end audio AI, though exact success rates go unpublished.","A new jailbreak framework can talk its way past the safety guardrails on voice AI systems - and it works whether that AI reads a transcript or listens to raw audio.\n\nResearchers built an adaptive attack tool that automatically generates and refines jailbreak attempts against audio-based AI systems, covering two different architectures at once. Some systems convert speech to text before an LLM ever sees it (cascaded pipelines); others process raw audio directly (end-to-end large audio-language models, or LALMs). The framework uses a feedback-guided mutation engine to mutate both text prompts and audio perturbations, adapting each attack based on how the target system responds. The researchers tested it against six audio-based AI systems and reported that both architectures remained substantially vulnerable.\n\nThat matters because most commercial voice assistants and audio chatbots fall into one of these two buckets, and until now most jailbreak research targeted only one at a time. A unified framework that hits both closes a blind spot: defenses tuned for text-level attacks on cascaded systems will not necessarily catch acoustic tricks aimed at end-to-end models, and vice versa.\n\nOne catch: the paper's own summary claims the framework beats prior state-of-the-art methods with \"consistently higher\" attack success rates, but does not publish the actual percentages or name which six systems were tested - specifics that matter more than the adjective.","[\"ai\",\"security\",\"jailbreak\",\"audio-llms\"]","2026-08-20T04:00:00.000Z","2026-08-20T07:23:22.276Z","2026-08-20T07:23:34.271Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Pull actual attack-success-rate figures (and the names of the six audio systems tested) from the full paper rather than the vague 'beat existing state-of-the-art methods' \u002F 'consistently higher' framing, which asserts a finding without stating the measured result.","resolved","security",[32,30,33,34],"ai","jailbreak","audio-llms",[36],{"name":37,"url":38},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2502.00735",0,{"sections":41},[42,45,48,53,58,63,68,73,78,83,88,93,98,103],{"name":43,"slug":32,"count":44,"latest_published_at":18},"AI",3294,{"name":46,"slug":30,"count":47,"latest_published_at":18},"Security",437,{"name":49,"slug":50,"count":51,"latest_published_at":52},"Policy","policy",210,"2026-08-19T09:32:27.000Z",{"name":54,"slug":55,"count":56,"latest_published_at":57},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":59,"slug":60,"count":61,"latest_published_at":62},"Hardware","hardware",140,"2026-08-19T18:25:42.000Z",{"name":64,"slug":65,"count":66,"latest_published_at":67},"Consumer Tech","consumer-tech",95,"2026-08-18T16:05:00.000Z",{"name":69,"slug":70,"count":71,"latest_published_at":72},"Science","science",90,"2026-08-19T18:41:02.000Z",{"name":74,"slug":75,"count":76,"latest_published_at":77},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":79,"slug":80,"count":81,"latest_published_at":82},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":84,"slug":85,"count":86,"latest_published_at":87},"Startups","startups",47,"2026-08-19T19:13:46.000Z",{"name":89,"slug":90,"count":91,"latest_published_at":92},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":94,"slug":95,"count":96,"latest_published_at":97},"General","general",33,"2026-08-18T22:18:13.000Z",{"name":99,"slug":100,"count":101,"latest_published_at":102},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":104,"slug":105,"count":106,"latest_published_at":107},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]