[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-prompt-filter-blunts-llm-jailbreaks-without-retraining":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},6131,"prompt-filter-blunts-llm-jailbreaks-without-retraining","Prompt Filter Blunts LLM Jailbreaks Without Retraining","A new input-only defense called AlcaTRAz knocks most jailbreak attempts down to near-refusals across 33 models, though a dangerous tail still gets through.","A new defense against LLM jailbreaks works entirely on the text going in, no access to model weights required.\n\nResearchers built AlcaTRAz, a system that learns a rule tree for inserting small, targeted character-level tweaks into a prompt before it reaches the model. The idea is to disrupt the structural patterns jailbreak attacks rely on, without touching the underlying weights or retraining anything. The team tested it across 33 open-weight models and 22 jailbreak attack types, benchmarking against three existing prompt-level defenses: Llama Guard, RA-LLM, and Goal Prioritization. AlcaTRAz posted the best combined security-and-usefulness score in 73.4% of model-attack pairings, and shifted the typical outcome from a maximal-severity compliance with the malicious request down to a near-refusal, while barely dinging performance on benign questions (8.35 versus 8.62 out of 10).\n\nThis matters because most serious jailbreak defenses assume you can get inside the model. AlcaTRAz doesn't, which makes it usable on the black-box, API-only deployments that most companies actually run. That's a more realistic starting point than techniques that only work if you control training or fine-tuning.\n\nStill, the researchers are upfront that this isn't a fix. A high-severity tail of successful jailbreaks remains, and the tests didn't include attackers who adapt specifically to this defense. Call it a speed bump, not a wall.","[\"ai-security\",\"jailbreaks\",\"llm-safety\",\"prompt-engineering\"]","2026-09-07T04:00:00.000Z","2026-09-07T06:16:01.075Z","2026-09-07T06:16:12.967Z","published",null,[],"security",[26,27,28,29],"ai-security","jailbreaks","llm-safety","prompt-engineering",[31],{"name":32,"url":33},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2609.03693",0,{"sections":36},[37,41,44,49,54,59,64,69,74,79,84,89,94,99],{"name":38,"slug":39,"count":40,"latest_published_at":18},"AI","ai",3405,{"name":42,"slug":24,"count":43,"latest_published_at":18},"Security",570,{"name":45,"slug":46,"count":47,"latest_published_at":48},"Policy","policy",310,"2026-09-06T15:34:34.000Z",{"name":50,"slug":51,"count":52,"latest_published_at":53},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":55,"slug":56,"count":57,"latest_published_at":58},"Hardware","hardware",152,"2026-09-03T09:26:48.000Z",{"name":60,"slug":61,"count":62,"latest_published_at":63},"Consumer Tech","consumer-tech",97,"2026-09-04T15:29:18.000Z",{"name":65,"slug":66,"count":67,"latest_published_at":68},"Science","science",96,"2026-09-03T22:30:00.000Z",{"name":70,"slug":71,"count":72,"latest_published_at":73},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":75,"slug":76,"count":77,"latest_published_at":78},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":80,"slug":81,"count":82,"latest_published_at":83},"Startups","startups",54,"2026-09-04T23:36:14.000Z",{"name":85,"slug":86,"count":87,"latest_published_at":88},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":90,"slug":91,"count":92,"latest_published_at":93},"General","general",39,"2026-09-05T16:13:57.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":98},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":100,"slug":101,"count":102,"latest_published_at":103},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]