{"id":14439,"date":"2025-07-14T11:57:23","date_gmt":"2025-07-14T11:57:23","guid":{"rendered":"https:\/\/newestek.com\/?p=14439"},"modified":"2025-07-14T11:57:23","modified_gmt":"2025-07-14T11:57:23","slug":"new-grok-4-ai-breached-within-48-hours-using-whispered-jailbreaks","status":"publish","type":"post","link":"https:\/\/newestek.com\/?p=14439","title":{"rendered":"New Grok-4 AI breached within 48 hours using \u2018whispered\u2019 jailbreaks"},"content":{"rendered":"
\n
\n
\n
\n
\n
\n
<\/div>\n<\/section>\n

xAI\u2019s newly launched Grok-4 is already showing cracks in its defenses, falling to recently revealed multi-conversational, suggestive jailbreak techniques.<\/p>\n

Two days after Elon Musk\u2019s latest edition of large language models (LLMs) hit the streets, researchers at NeuralTrust managed to sweet-talk it into lowering its guardrails and providing instructions for making a Molotov cocktail, all without any explicit malicious input.<\/p>\n

\u201cLLM jailbreak attacks are not only evolving individually, they can also be combined to amplify their effectiveness,\u201d NeuralTrust researcher Ahmad Alobaid said in a blog post. \u201cWe combined Echo Chamber and Crescendo to jailbreak the LLM.\u201d<\/p>\n

Both Echo Chamber<\/a> and Crescendo<\/a> are multi-turn jailbreak techniques that manipulate large language models by gradually shaping their internal context.<\/p>\n

<\/a>Stealthy backdoor through combined jailbreaks<\/h2>\n

The researchers started their test with Echo Chamber, which exploits the model\u2019s tendency to trust consistency across conversations, involving multiple conversations that \u2018echo\u2019 the same malicious idea or behavior. The model, when prompted in a new thread referencing prior chats, assumes that since the same idea appeared multiple times, it is acceptable.<\/p>\n

\u201cWhile the persuasion cycle nudged the model toward the harmful goal, it wasn\u2019t sufficient on its own,\u201d Alobaid said<\/a>. \u201cAt this point, Crescendo provided the necessary boost.\u201d The Crescendo jailbreak, identified and coined<\/a> by Microsoft, gradually escalates a conversation from innocuous prompts to malicious outputs, slipping past safety filters through subtle progression.<\/p>\n

In their test, the researchers included an additional check in the persuasion cycle to detect \u2018stale\u2019 progress- situations where the conversation isn\u2019t moving toward the malicious objective. Crescendo was used to finish the exploit in such cases.<\/p>\n

With just two additional turns, the combined approach succeeded in eliciting the target response, Alobaid added.<\/p>\n

Safety systems cheated by contextual tricks<\/h2>\n

The attack exploits Grok 4\u2019s contextual memory, echoing its own earlier statements back to it, and gradually guides it toward a goal without raising alarms. Combining Crescendo with Echo Chamber, the jailbreak technique that achieved over 90% success<\/a> in hate speech and violence tests across top LLMs, strengthens the attack vector.<\/p>\n

Owing to the lack of keyword triggers or direct prompts in the exploit, existing defenses built around blacklists and explicit malicious detection are expected to fail. Alobaid revealed the NeuralTrust experiment achieved a 67% success for Molotov preparation instructions with a combined Echo Chambers-Crescendo effort, and was about 50% and 30% successful for exploit topics like Meth and Toxin, respectively.<\/p>\n

\u201cThis (experiment) highlights a critical vulnerability: attacks can bypass intent or keyword-based filtering by exploiting the broader conversational context rather than relying on overtly harmful input,\u201d Alobaid added. \u201cOur findings underscore the importance of evaluating LLM defenses in multi-turn settings where subtle, persistent manipulation can lead to unexpected model behavior.\u201d<\/p>\n

xAI did not immediately respond to requests for comments.<\/p>\n

As AI assistants and cloud-based LLMs gain traction in critical settings, these multi-turn \u2018whispered\u2019 exploits expose serious guardrail flaws. Previously, these models have been shown vulnerable to similar manipulations, including Microsoft\u2019s Skeleton Key<\/a> jailbreak, the MathPrompt<\/a> bypass, and other context poisoning<\/a> attacks, pressing the case for targeted, AI-aware firewalls<\/a>.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

xAI\u2019s newly launched Grok-4 is already showing cracks in its defenses, falling to recently revealed multi-conversational, suggestive jailbreak techniques. Two days after Elon Musk\u2019s latest edition of large language models (LLMs) hit the streets, researchers at NeuralTrust managed to sweet-talk it into lowering its guardrails and providing instructions for making a Molotov cocktail, all without any explicit malicious input. \u201cLLM jailbreak attacks are not only… <\/p>\n

Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-14439","post","type-post","status-publish","format-standard","hentry","category-uncategorized","is-cat-link-borders-light is-cat-link-rounded"],"_links":{"self":[{"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/posts\/14439","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=14439"}],"version-history":[{"count":0,"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/posts\/14439\/revisions"}],"wp:attachment":[{"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=14439"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=14439"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=14439"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}