LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet. - Nathaniel Li; Ziwen Han; Ian Steneker; Willow Primack; Riley Goodside; Hugh Zhang; Zifan Wang 001; Cristina Menghini; Summer Yue (CoRR, 2024)