Jailbreak Attack Initializations as Extractors of Compliance Directions. - Amit LeVi 002; Rom Himelstein; Yaniv Nemcovsky; Avi Mendelson; Chaim Baskin (EMNLP (Findings), 2025)

Enhancing Jailbreak Attacks via Compliance-Refusal-Based Initialization. - Amit LeVi 002; Rom Himelstein; Yaniv Nemcovsky; Avi Mendelson; Chaim Baskin (CoRR, 2025)

Silent Tokens, Loud Effects: Padding in LLMs. - Rom Himelstein; Amit LeVi 002; Yonatan Belinkov; Avi Mendelson (CoRR, 2025)

You Had One Job: Per-Task Quantization Using LLMs' Hidden Representations. - Amit LeVi 002; Raz Lapid; Rom Himelstein; Yaniv Nemcovsky; Ravid Shwartz-Ziv; Avi Mendelson (CoRR, 2025)

Activation Steering for Masked Diffusion Language Models. - Adi Shnaidman; Erin Feiglin; Osher Yaari; Efrat Mentel; Amit LeVi 002; Raz Lapid (CoRR, 2025)

Silenced Biases: The Dark Side LLMs Learned to Refuse. - Rom Himelstein; Amit LeVi 002; Brit Youngmann; Yaniv Nemcovsky; Avi Mendelson (AAAI, 2026)

Step-Wise Refusal Dynamics in Autoregressive and Diffusion Language Models. - Eliron Rahimi; Elad Hirshel; Rom Himelstein; Amit LeVi 002; Avi Mendelson; Chaim Baskin (CoRR, 2026)

Extracting Recurring Vulnerabilities from Black-Box LLM-Generated Software. - Tomer Kordonsky; Maayan Yamin; Noam Benzimra; Amit LeVi 002; Avi Mendelson (CoRR, 2026)