Jailbreaking for the Average Jane: Bandit Algorithms Pick Optimal Jailbreaks for Non-Experts
arXiv 2606.26936·medium signal
This work examines whether non-expert malicious actors can reliably elicit harmful responses, noting a successful attack needs two ingredients: a powerful jailbreak for the target model and an effective malicious query. It proposes a multi-armed-bandit attack strategy that automatically selects the best jailbreak and enhances queries. The finding sharpens the threat model: automation lowers the expertise bar for jailbreaking deployed models.