The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections. - Milad Nasr; Nicholas Carlini; Chawin Sitawarin; Sander V. Schulhoff; Jamie Hayes; Michael Ilie; Juliette Pluto; Shuang Song 001; Harsh Chaudhari; Ilia Shumailov; Abhradeep Thakurta; Kai Yuanqing Xiao; et al. (CoRR, 2025)