CS PhD student @TelAvivUni. Intern @google. Interested in buzzwords like AI and Security, and wherever they meet.

Joined October 2009
Discrete trigger optimizers (eg GCG) are extremely useful in NLP security (eg LLM jailbreaks), but in practice it's an engineering mess. Introducing TROPT: a powerful framework housing 15+ popular optimizers, ready to use against any objective (!) and any model (!!) 🧵
3
2
2
13
3,365
Excited to share that TROPT has been accepted to NeurIPS 2026 (E&D Track)! 🥳 If you're using discrete text optimization methods for jailbreak / other tasks, check it out 👇
Discrete trigger optimizers (eg GCG) are extremely useful in NLP security (eg LLM jailbreaks), but in practice it's an engineering mess. Introducing TROPT: a powerful framework housing 15+ popular optimizers, ready to use against any objective (!) and any model (!!) 🧵
1
10
212
We can finally talk about it: We found a way to extract hidden reasoning of frontier models using a vulnerability in the APIs of every frontier AI company. We verified that our reasoning token count matches billed API thinking tokens 1:1 for most of the prompts we queried.
380
1,960
620
13,512
3,539,947
I'll be in San Diego for #ACL2026 🇺🇸, presenting our TACL work on LLM jailbreaks through mech interp lens: Universal Jailbreak Suffixes Are Strong Attention Hijackers @mahmoods01 @megamor2 📍Jul 5 14:00-14:10, Harbor D (Oral Session) If you're interested in NLP security, mech interp, or leveraging discrete input optimizers for various uses, let's chat! 🌊
What makes or breaks powerful jailbreak suffixes? 🔓🤖 We find that: 🥷 they work by hijacking the model’s context; ♾️ the more universal a suffix is the stronger its hijacking; ⚔️🛡️ utilizing these insights, it is possible to both enhance and mitigate these attacks. 🧵
15
579
Matan Ben-Tov retweeted
Here we go! ✈️ 🇺🇸🇰🇷 If you're attending #ACL2026 and/or #ICML2026 check out recent work from our group with collaborators: 📍Jul 5 14:00-15:30: Matan will present his TACL work "Universal Jailbreak Suffixes Are Strong Attention Hijackers" @matanbt @mahmoods01 arxiv.org/abs/2506.12880 📍Jul 5 16:00-17:30: My student Or will show how matrix factorization can reveal compositional neuron groups and hierarchies in MLPs. @OrShafran arxiv.org/abs/2506.10920 📍Jul 6 9:00-10:30: Tomer will talk about "MoNaCo: More Natural and Complex Questions for Reasoning Across Dozens of Documents" @TomerWolfson arxiv.org/abs/2508.11133 📍Jul 7 14:00-15:45: Hadas will present our position: "Interpretability Can Be Actionable" @OrgadHadas arxiv.org/abs/2605.11161 (will also appear at the MI workshop) 📍Jul 8 10:30-12:15: I will be presenting a position work with @_galyo and @ymatias on metacognition as a way to move beyond hallucinations arxiv.org/abs/2605.01428 📍Jul 9 17:00-18:45: Or (after a transpacific flight from ACL) will present MFA: an unsupervised approach to disentangle representations of LLMs at scale using local geometry @OrShafran arxiv.org/abs/2602.02464 (will also appear at the MI workshop)
11
85
3,523
Huge thanks to @mahmoods01 for guiding me on this project. I've long worked on this repo, and am very excited to see how it’ll be used! I intend to keep growing it and iterate on it in light of any future community feedback -- do feel free to reach out and contribute!
3
102