[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-new-technique-bypasses-multi-scanner-ai-guardrails-every-time":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},10957,"new-technique-bypasses-multi-scanner-ai-guardrails-every-time","New Technique Bypasses Multi-Scanner AI Guardrails Every Time","Researchers' BRANCH method defeated six layered AI guardrail systems in every test, using fewer queries and less time than older jailbreak techniques.","A new jailbreak method cracks AI guardrail systems that stack multiple scanners together, and it does so every single time.\n\nResearchers built a method called BRANCH that runs a branching tree search, probing each scanner in a multi-scanner guardrail setup on its own, then combining the strongest perturbations into a single adversarial prompt. Tested against six guardrail systems across 120 scenarios, it hit a 100% success rate while using 72% fewer queries and finishing 4.5 times faster than established bypass techniques. The winning prompts kept their original meaning intact, so the attack doesn't need to mangle a request to slip it through. The same bypasses, with no extra tuning, also worked against 29 guardrails the method had never seen, including eight commercial black-box products.\n\nVendors have pitched multi-scanner setups as the stronger defense, on the theory that stacking classifiers closes the gaps any single filter leaves open. BRANCH suggests that theory doesn't hold: separating bypass evaluation from attack optimization lets an attacker route around several scanners at once instead of fighting them one at a time. The more unsettling finding is that the exploit generalizes to commercial, unseen systems, which is exactly what teams buying off-the-shelf guardrails are counting on not happening.\n\nStacking filters was supposed to fix single-scanner blind spots; this result is a reminder that more layers don't automatically mean more security.","[\"ai-security\",\"jailbreak\",\"guardrails\",\"adversarial-ai\"]","2026-10-09T04:00:00.000Z","2026-10-09T23:20:12.994Z","2026-10-09T23:20:18.191Z","published",null,[],"security",[26,27,28,29],"ai-security","jailbreak","guardrails","adversarial-ai",[31],{"name":32,"url":33},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2610.10742",0,{"sections":36},[37,41,44,49,54,58,62,67,72,77,82,87,92,97],{"name":38,"slug":39,"count":40,"latest_published_at":18},"AI","ai",6708,{"name":42,"slug":24,"count":43,"latest_published_at":18},"Security",931,{"name":45,"slug":46,"count":47,"latest_published_at":48},"Policy","policy",486,"2026-10-08T22:40:11.000Z",{"name":50,"slug":51,"count":52,"latest_published_at":53},"Deals","deals",474,"2026-10-08T22:00:00.000Z",{"name":55,"slug":56,"count":57,"latest_published_at":18},"Hardware","hardware",231,{"name":59,"slug":60,"count":61,"latest_published_at":18},"Science","science",192,{"name":63,"slug":64,"count":65,"latest_published_at":66},"Consumer Tech","consumer-tech",181,"2026-10-08T23:26:35.000Z",{"name":68,"slug":69,"count":70,"latest_published_at":71},"Startups","startups",117,"2026-10-08T16:45:00.000Z",{"name":73,"slug":74,"count":75,"latest_published_at":76},"Software","software",114,"2026-10-08T17:57:01.000Z",{"name":78,"slug":79,"count":80,"latest_published_at":81},"Dev Tools","dev-tools",105,"2026-10-07T16:59:11.000Z",{"name":83,"slug":84,"count":85,"latest_published_at":86},"General","general",66,"2026-10-09T04:46:11.000Z",{"name":88,"slug":89,"count":90,"latest_published_at":91},"Gaming","gaming",58,"2026-10-08T20:08:45.000Z",{"name":93,"slug":94,"count":95,"latest_published_at":96},"Reviews","reviews",34,"2026-10-08T14:00:22.000Z",{"name":98,"slug":99,"count":100,"latest_published_at":101},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]