LLM Refusal Driven by Tiny Activation Directions, New Attack Flips Safety
Researchers show that LLM refusal stems from a few activation directions and introduce activation‑guided suffix attacks that bypass safety layers. The method speeds up jailbreaks 33× and reveals that safety signals are distributed across the network, challenging current alignment approaches.