Jailbreaking

Reading Time: 5 minutesResearchers presenting at ICML 2026 have shown that LLMs identify instruction roles by text style rather than by structural tags, making chain-of-thought forgery attacks nearly impossible to fully eliminate through training alone. The finding has serious implications for AI deployed in sensitive domains from healthcare to military systems.