A Few Steps Further: Why Defenses Against Malicious Finetuning Erode Under Continued Training.

arXiv:2605.14605v4 Announce Type: replace-cross Abstract: Model providers increasingly release the weights of large language models. Although these models are safety-aligned before release, their safeguards can often be removed by fine-tuning on harmful data.