@misc{indiciae51d40f67e730, title = {No, of Course I Can! Deeper Fine-Tuning Attacks That Bypass Token-Level Safety Mechanisms}, author = {Joshua Kazdan and Abhay Puri and Rylan Schaeffer and Lisa Yu and Chris Cundy and Jason Stanley and Sanmi Koyejo and Krishnamurthy Dvijotham}, year = {2025}, url = {https://arxiv.org/abs/2502.19537}, note = {Source identifier: 2502.19537} }