Berkeley AI Research (BAIR)

Prismata cuts attack success rates dramatically while ensuring web agents can still perform their intended tasks without developer input.

FourTune slashes memory overhead by 2.25x while matching the performance of full-precision fine-tuning in diffusion models.

State-of-the-art Vision-Language Models fall short in real-world robotic applications, revealing critical gaps in their reasoning capabilities.

Rethinking LLMs through the lens of world literature could revolutionize how AI interprets and engages with diverse cultural narratives.

STL-shaped rewards lead to tighter velocity tracking and more stable training for quadruped locomotion, outperforming traditional hand-crafted methods.

Online imitation learning can outperform offline methods, but only when the student can effectively represent the expert—realizability is key.

Claw-like agents are vulnerable to severe security breaches, with malicious plugins achieving a 100% success rate in attacks.

Synthesizing 48,000 interaction trajectories without human input enables a humanoid robot to learn complex loco-manipulation tasks effectively.

Muon achieves rapid convergence in matrix factorization by avoiding slow saddle dynamics and enabling high learning rates, aligning weights in just two steps.

Chai uncovers over 100 cryptographic vulnerabilities, including a critical flaw in an SSL library used by billions, by transforming how we approach vulnerability discovery.

Solving Blackwell approachability problems via Gradient Equilibrium oracles reveals a deep connection between these two seemingly distinct optimization frameworks.

Asynchronous OPD can boost training throughput significantly while managing the challenges of stale data, transforming the efficiency of large language model fine-tuning.

Racing replicas instead of the clock allows Ambulance to achieve unprecedented throughput and low latency in BFT systems.

D2D transforms conversational product search by cutting conversation times by nearly 30% while boosting accuracy and user satisfaction.

Training data diversity is the secret sauce that boosts agentic model performance, with OpenThoughts-Agent achieving a notable accuracy leap over existing benchmarks.

Transforming sparse rewards into dense feedback can accelerate RL training by significantly enhancing policy learning efficiency without compromising optimality.

Grounded verification in TEXEDO enables humanoid robots to execute complex motions that are both semantically aligned with text prompts and physically feasible.

Libretto transforms symbolic music generation into a structured, editable process, enabling LLMs to create and revise music with unprecedented precision and control.

VIMPO achieves superior performance in reasoning tasks by enabling fine-grained credit assignment without the complexities of a critic, redefining the landscape of reinforcement learning for LLMs.

The traditional complexity of leverage-score algorithms is misleading; the real challenge lies in identification, not accuracy, allowing for a dramatic reduction in query complexity.

Retraining generative models with different seeds can shift FID scores dramatically more than merely resampling, revealing a hidden layer of randomness in model evaluation.

Coding agents can now autonomously refine robotic manipulation policies to achieve a staggering 99% success rate on complex tasks, revolutionizing real-world robotics.

SC3-Eval achieves a remarkable 0.929 Pearson correlation in evaluating robot policies, revealing critical insights into their real-world performance.

Local ordinances, often overlooked in legal AI, are now accessible at scale with the launch of LOCUS, enabling deep analysis of everyday regulations.

Kappa deflation reveals that LLM-as-a-Judge models may be overstating their discriminative abilities by up to 41 percentage points.

Human videos can now be transformed into actionable manipulation data for robots, overcoming traditional barriers in hand-object interaction estimation.

Spatial attention in VLMs is nearly irrelevant to accuracy, with self-consistency emerging as the true indicator of reliability.

A mere 1% of poisoned samples can flip classifier labels, leading to catastrophic false positives and negatives in jailbreak detection systems.

Tactile-reactive policies can boost robotic manipulation success rates by over 30% through innovative data collection and a new Mixture-of-Transformers architecture.

Extracting action signals from 32,041 hours of human video enables CAIP to outperform leading vision encoders in robotic manipulation tasks by over 30%.

Evolved playbooks can boost vulnerability detection rates by over 6x and outperform dedicated commercial products, reshaping the landscape of automated security auditing.

RHO achieves a 45.0% success rate in robotic tasks, 2.5x higher than the best multi-turn agent, showcasing a breakthrough in real-time control efficiency.

Achieving up to 88x efficiency gains, Taylor-Calibrate transforms the way we initialize hybrid linear attention models, drastically reducing the training burden.

VisualClaw slashes API costs by 98% while boosting accuracy, transforming how VLMs can operate in real-time environments.

FTP-1 not only excels on familiar tactile sensors but also achieves unprecedented success on unseen setups, redefining the potential for cross-sensor generalization in robotic manipulation.

Current AI agents excel in structured tasks but falter at generating novel insights and tackling open-ended scientific challenges.

State-of-the-art surgical robotics policies can be disrupted by adversarial attacks, leading to a staggering 61% drop in task success rates.

LLMs reveal surprising strengths and weaknesses in analyzing security logs, with performance heavily influenced by model design choices.

QGF achieves superior performance in reinforcement learning by optimizing policies solely at test time, sidestepping the instability of traditional training methods.

High-quality dense rewards can elevate robotic manipulation success rates from 50% to near perfection, transforming how robots learn from their environments.

Adversaries can achieve complete control over robotic policies in real-time by exploiting visual conditioning vulnerabilities, turning them into remotely piloted instruments.

Determination provenance reveals how to quantify and analyze the ambiguity in data systems, transforming our understanding of data resolution costs.

StreamForce achieves real-time video generation with physical control, outperforming traditional models in both responsiveness and realism.

Active exploration can dramatically enhance adults' ability to reason about complex causal relationships, but even with this advantage, they still struggle compared to simpler tasks.

LadderMan enables humanoid robots to climb ladders and manipulate objects with unprecedented robustness and adaptability in real-world scenarios.

Site4Drug revolutionizes drug target selection by autonomously recommending binding modalities based on comprehensive evidence, minimizing the risk of biologically occluded sites.

Achieving competitive computational efficiency in Hartree-Fock theory while allowing for flexible orbital locality could revolutionize molecular simulations.

Reward models trained only on success are fundamentally misaligned with human values, leading to dangerous over-rewarding of poor robot behaviors.

Evolving coding problems can restore meaningful evaluation metrics for frontier models, revealing their true capabilities and enabling self-improvement.

ToggleCCI adapts to unpredictable traffic patterns, delivering significant cost savings by dynamically switching between VPN and CCI based on real-time cost trends.

Masking stale observations can boost search agent accuracy, but only under specific conditions—too much masking can backfire dramatically.

Tactile sim-to-real just got real: a physics-grounded representation unlocks zero-shot transfer for complex dexterous manipulation tasks, even without ground truth sensor calibration.

Transformers can provably internalize chain-of-thought reasoning, matching the sample efficiency of explicit CoT while eliminating its inference overhead.

Introspection Adapters, a promising approach to LLM safety, can be completely defeated by exploiting architectural symmetries.

Entangled photons let you selectively excite specific biexciton states in quantum dots, opening new doors for quantum control.

Stop hand-tuning your retrieval pipelines: BRANE slashes costs by up to 89% while matching accuracy by dynamically configuring pipelines per query.

Widely used approximations for modeling hot-exciton relaxation in semiconductor nanocrystals can fail, but mapping surface hopping (MASH) offers a more reliable alternative.

By parameterizing electronic structure calculations with both nuclear position and momentum, this work unlocks more accurate simulations of coupled nuclear-electronic motion, including effects like chiral induced spin selectivity.

Camera pose, largely ignored in video LLMs, unlocks significant gains in spatial reasoning and even improves general video QA when used as a lightweight supervisory signal.

LLMs get *worse* at forecasting high-stakes events like epidemics and financial crises as they get more capable, because they aggressively extrapolate growth and overestimate tail risk.

Adaptive evaluation exposes a substantial vulnerability gap, revealing that existing defenses may underestimate the capabilities of distillation attacks.

Curiosity-driven agents can escape local loops in 3D environments by remembering where they've been and building a persistent map of the world.

Stop writing brittle log parsers: Sieve uses LLMs to directly query raw security logs with natural language, outperforming hand-coded scripts on complex investigations.

Forget scaling laws – the real bottleneck in associative memory isn't storage, it's retrieval: forcing a single "winner" costs you a logarithmic factor in capacity compared to allowing a ranked list.

Adversarial clothing with non-overlapping visible-thermal patterns can reliably evade RGB-T detectors, even transferring across different fusion architectures.

Retrieval-augmented LLMs are surprisingly vulnerable to memory poisoning via synonym substitution, a loophole that gradient-based defenses can't close.

YouTube's recommendation algorithm pushes Kyrgyz children towards Russian-language content, even when they signal a preference for their native tongue, effectively amplifying colonial influence.

LLM-powered query reformulation, a hot topic in IR, often fails to translate gains from lexical to neural retrieval, and bigger models don't always help.

LLMs struggle with structured 2D tasks when inputs are serialized into 1D, revealing a surprising performance gap compared to vision-augmented models that directly process the 2D layout.

Multi-agent LLM systems are leaving performance on the table by treating structured agent interactions as generic traffic; Pythia shows how to unlock substantial gains by exploiting workflow semantics at the serving layer.

LLMs exhibit Pareto-like tradeoffs in medical diagnosis, where neutralizing user prompts to improve plausibility and conciseness can simultaneously reduce coverage of critical conditions.

Forget hand-crafted examples: this system automatically generates worked examples tailored to student errors by mining common code patterns.

The dream of universal representations across modalities may be just that: scaling up datasets and relaxing constraints reveals that models trained on different modalities learn rich, but fundamentally different, representations of the world.

Kernel launch overhead is a bigger bottleneck than you think: GPUOS achieves up to 15.3x speedup by fusing operations at runtime.

Claim verification in peer reviews just got a major upgrade with Peerispect, a tool that highlights evidence directly in manuscripts for rapid assessment.

Current LLM detection methods in peer review are fooled by hybrid human-AI workflows, mistaking AI-written text for AI-originated ideas.

LLMs may learn shared syntactic dependencies even with limited data, but they're still data-hungry toddlers compared to humans.

AI audit standards can fail to ensure responsible AI practices due to vague requirements and undefined terms, even while appearing compliant.

Agentic data science pipelines often reach falsely optimistic conclusions, but two simple sanity checks can expose these unsupported claims by testing if the agent can reliably distinguish signal from noise.

Generate diverse, physically plausible, and language-annotated whole-body motion data for humanoid robots at scale with this new interactive web-based pipeline.

Unlock zero-shot generalization in robot manipulation by generating diverse, affordance-aware training data with 3D generative models and Vision Foundation Models.

LLM-powered simulations of societal behavior risk encoding and amplifying existing biases unless strict ethical preconditions are enforced.

Verifier-free evolution can now match or exceed the performance of verifier-based methods, while slashing API costs by 3x and boosting throughput by 10x, thanks to a clever model orchestration strategy.

Cut LLM cold starts from minutes to seconds by pre-materializing CUDA graph execution contexts, sidestepping brittle kernel patching and heavyweight checkpointing.

MoEs can be pruned more effectively by considering cross-layer redundancy, leading to significant performance gains compared to uniform pruning strategies.

Core excitons in NaF decohere in under 8fs, and polarization-controlled attosecond spectroscopy reveals that bright excitons have s-like symmetry while dark excitons have p-like symmetry.

Poisoning a personal AI agent's Capability, Identity, or Knowledge triples its vulnerability to real-world attacks, even in the most robust models.

Forget hyperparameter tuning – autonomous research reveals that bug fixes and architectural tweaks unlock far greater gains in multimodal agent memory.

Professional translators fear that LLMs are compromising the essential human elements of translation, potentially leading to harmful downstream consequences.

Get 3x the imitation learning performance from your robot with just a few extra cameras.

Stop prompting LLMs to blindly rewrite queries – ReFormeR distills query transformations into reusable patterns that actually improve retrieval.

Overcome simulation imperfections and limited experimental data by aligning generative models with real-world observations, even with partial and correlated measurements.

Helium rain in gas giants may be less frequent than we thought, thanks to new simulations that significantly lower the estimated hydrogen-helium demixing temperatures.

Training domain-specific coding LLMs with realistic environments and large-scale RL can yield substantial gains in practical software engineering tasks.

Running robotic manipulation workloads entirely onboard kills robot batteries, but offloading to the cloud tanks accuracy due to network latency, revealing a critical compute placement trade-off.

LVLMs can be made significantly less prone to hallucinations, without any training, by explicitly grounding them in visual evidence and iteratively self-refining their answers based on verified information.

Current AI's hunger for curated data may be solved by a new architecture inspired by human cognition that flexibly switches between observation, active behavior, and meta-control.

Teaching robots to manipulate objects just got easier: OCRA learns directly from human demonstration videos by focusing on object interactions and incorporating tactile feedback.

Securing AI agents demands a new security paradigm, as their integration of LLMs with traditional systems introduces vulnerabilities beyond those of standard software.

Reading Activity Traces (RATs) reveal the hidden creative work lost when algorithms automate interpretation, offering a path to design AI that preserves human insight.