@inproceedings{pit-etal-2026-one,
    title = "One Refusal Isn{'}t Enough: Multi-Turn Jailbreak Attacks on Large Language Models",
    author = "Pit, Pagnarasmey  and
      Ma, Xingjun  and
      Bailey, James  and
      Hovy, Eduard",
    editor = "Lee, Hung-Yi  and
      Dev, Sunipa  and
      Li, Jessy  and
      Elliott, Desmond",
    booktitle = "Proceedings of the 2026 Conference on Empirical Methods in Natural Language Processing",
    month = oct,
    year = "2026",
    address = "Budapest, Hungary",
    publisher = "Association for Computational Linguistics",
    url = "https://aclanthology.org/2026.emnlp-main.2577/",
    pages = "58571--58591",
    ISBN = "979-8-89176-459-0"
}