RISE Finds New Image Models Easier to Jailbreak
White Circle says GPT-Image-2.5 Flare and Nano Banana 2.1 appear more breakable than their predecessors under the same red-team process. However, the published RISE preprint reports human-verified rates only for earlier models, reaching up to 13%.
The real story is evaluation quality: newer image models may be trading safety margin for capability, but the latest comparison still needs independently published numbers.
- –RISE evolves reusable attack strategies instead of endlessly rewriting individual prompts.
- –Its calibrated judging reportedly drives earlier methods’ claimed success rates near zero.
- –The public evidence covers DALL·E 3, Nano Banana 2, and GPT-Image-2—not yet the newer 2.5 and 2.1 models.
- –Developers shipping image generation should test safety regressions after every model upgrade, not assume newer means safer.
- –The gap between vendor safety cards and independent red-team results makes standardized external evaluations increasingly important.
DISCOVERED
1h ago
2026-10-14
PUBLISHED
1h ago
2026-10-14
RELEVANCE
AUTHOR
TTrimoreau