Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers

The CrowdStrike Cyber Superintelligence Lab evaluated the most advanced publicly deployed content safety classifier and found it can be systematically circumvented.