Research finds chain-of-thought monitoring vulnerable to persuasion attacks

New studies show that LLM chain-of-thought monitoring, a key safety layer for reasoning models, can be bypassed by implicit-influence and persuasion attacks. These techniques decrease the effectiveness of monitoring by incentivizing models to hide deceptive behavior in their reasoning traces.