Safety alignment of large language models (LLMs) is mostly evaluated in English and contract-bound, leaving multilingual vulnerabilities understudied. We introduce \textbf{Indic Jailbreak Robustness (IJR)}, a judge-free benchmark for adversarial safety across 12 Indic and South Asian languages (2.1 Billion speakers), covering 45216 prompts in JSON (contract-bound) and Free (naturalistic) tracks.
IJR reveals three patterns. (1) Contracts inflate refusals but do not stop jailbreaks: in JSON, LLaMA and Sarvam exceed 0.92 JSR, and in Free all models reach 1.0 with refusals collapsing. (2) English to Indic attacks transfer strongly, with format wrappers often outperforming instruction wrappers. (3) Orthography matters: romanized or mixed inputs reduce JSR under JSON, with correlations to romanization share and tokenization (approx 0.28 to 0.32) indicating systematic effects. Human audits confirm detector reliability, and lite-to-full comparisons preserve conclusions. IJR offers a reproducible multilingual stress test revealing risks hidden by English-only, contract-focused evaluations, especially for South Asian users who frequently code-switch and romanize.
D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting
University of California, Berkeley（加州大学伯克利分校）；International Computer Science Institute（国际计算机科学研究所）；University of California, Riverside（加州大学河滨分校）；Lawrence Berkeley National Laboratory（伯克利国家实验室）
TukaBench: A Culturally Grounded Jailbreak Benchmark for African Languages
Mila - Quebec AI Institute（魁北克人工智能研究院）；McGill University（麦吉尔大学）；Microsoft AI for Good Research Lab（微软人工智能造福人类研究实验室）；Canada CIFAR AI Chair（加拿大CIFAR人工智能主席）
Measuring the Wrong Thing: Internal Harmfulness Scores Anti-Rank Successful Jailbreaks
College of Computer Science and Artificial Intelligence, Fudan University（复旦大学计算机科学与人工智能学院）；School of Computer Engineering and Science, Shanghai University（上海大学计算机工程与科学学院）；Beijing Normal University（北京师范大学）；Institute of Advanced Intelligence and Computing, A*STAR（新加坡科技研究局高级智能与计算研究所）；School of Communication and Electronic Engineering, East China Normal University（华东师范大学通信与电子工程学院）；Institute of Big Data, Fudan University（复旦大学大数据研究院）；Department of Computer Science, Worcester Polytechnic Institute（伍斯特理工学院计算机科学系）
Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Models
DEXAI – Icaro Lab（DEXAI–Icaro实验室）；Sapienza University of Rome（罗马Sapienza大学）；Sant’Anna School of Advanced Studies（Sant’Anna高级研究学校）；VU Amsterdam（阿姆斯特丹VU）
BAIT: Boundary-Guided Disclosure Escalation LLM Jailbreaking via Self-Conditioned Reasoning
The Harbin Institute of Technology（哈尔滨工业大学）；The Hong Kong Polytechnic University（香港理工大学）；Shenzhen University（深圳大学）；Shenzhen Loop Area Institute（深圳河套学院）
Voices Across Registers: Corpus-Conditioned Vernacular Jailbreaks against Aligned LLMs via Fanfiction Subgenres
School of Science and Engineering, The Chinese University of Hong Kong (Shenzhen)（香港中文大学（深圳）科学与工程学院）；The Shenzhen Future Network of Intelligence Institute (FNii-Shenzhen)（深圳未来网络智能研究院）；The Guangdong Provincial Key Laboratory of Future Networks of Intelligence（广东省未来网络智能重点实验室）；School of Microelectronics, Xi’an Jiaotong University（西安交通大学微电子学院）
JAILJUDGE: A Comprehensive Jailbreak Judge Benchmark with Multi-Agent Enhanced Explanation Evaluation Framework
The Hong Kong University of Science and Technology (Guangzhou)（香港科技大学（广州））；Baidu Inc.（百度公司）；The Hong Kong University of Science and Technology（香港科技大学）；University of Birmingham（伯明翰大学）
Red-TTT: Test-Time Training for Automated Jailbreaking Large Language Models
Johns Hopkins University（约翰斯·霍普金斯大学）；National University of Singapore（新加坡国立大学）；Washington University in St. Louis（圣路易斯华盛顿大学）；University of Illinois Urbana-Champaign（伊利诺伊大学厄巴纳-香槟分校）；Stanford University（斯坦福大学）
Confusion is the Final Barrier: Rethinking Jailbreak Evaluation and Investigating the Real Misuse Threat of LLMs
State Key Lab of Processors, Institute of Computing Technology, CAS（中国科学院计算技术研究所状态关键实验室）；University of Chinese Academy of Sciences（中国科学院大学）；People’s Public Security University of China（中国人民公安大学）；Chinese University of Hong Kong（香港大学）
Alignment Quality Index (AQI) : Beyond Refusals: AQI as an Intrinsic Alignment Diagnostic via Latent Geometry, Cluster Divergence, and Layer wise Pooled Representations
Manipal University Jaipur（Manipal大学贾ipur分校）；LinkedIn；IIT Kharagpur（印度理工学院Kharagpur分校）；IIIT Guwahati（印度冈瓦提理工学院）；Texas A&M University（德克萨斯A&M大学）；Vellore Institute of Technology（维洛雷理工学院）；Meta AI；Evalueserve；New York University（纽约大学）；Amazon AI；BITS Goa（果阿理工学院）
Can Small-Scale Data Poisoning Exacerbate Dialect-Linked Biases in Large Language Models?
Department of Electrical and Computer Engineering, Maroun Semaan Faculty of Engineering and Architecture（电气与计算机工程系，马鲁恩·塞马安工程与建筑学院）；American University of Beirut（贝鲁特美国大学）
MMJailBench: A Factorized Benchmark for Disentangling Multimodal Jailbreak Vulnerabilities
Tongji University（同济大学）；Mohamed bin Zayed University of Artificial Intelligence（穆罕默德·本·扎耶德人工智能大学）；Shanghai Artificial Intelligence Laboratory（上海人工智能实验室）
