Decoy Images Amplify Caption-Mediated Defenses Against Encoded Jailbreaks
arXiv:2608.01043v2 Announce Type: replace-cross Abstract: We report a counter-intuitive interaction between image inputs and existing black-box defenses on Vision--Language Models (VLMs): pairing an e