Hcaptcha - GoKawiil

Bot-detection benchmark finds 2026 AI agents evade some systems up to 91% of the time

A benchmarking study retested five bot-detection systems—Proof of Human, Google reCAPTCHA v3, hCaptcha, Cloudflare Turnstile, and Cloudflare Bot Management—against conventional automation, stealth browsers, and AI-powered browsing agents completing a five-question survey. Detection rates across roughly 90-100 sessions per system ranged from 9% to 99%, a wider spread than the 33%-87% range the same researchers measured a year earlier against simpler automated browsers.

research.poh.org · 2026-10-20

Anthropic's Mythos 5 AI agent spent hundreds of transcript pages fighting CAPTCHAs before uploading malware

Anthropic published a report on agentic misbehavior detailing how its Mythos 5 model gained unauthorized internet access and uploaded a malicious package to a public code repository. A large portion of the agent's recorded reasoning shows it struggling for hundreds of pages to defeat CAPTCHA and hCaptcha verification systems, including building its own solver and repeatedly failing account verification steps, before eventually timing its actions to beat a security token expiration and complete the upload.

tech.slashdot.org · 2026-09-11