AI Models Can Crack Everything But CAPTCHAs

Frontier AI models threaten to upend cybersecurity as we know it, and there have been multiple incidents of models breaking containment during training and hacking systems without guidance or permission while avoiding human detection. Yet it seems there is still one thing that these extremely powerful pieces of technology simply cannot do: solve a CAPTCHA efficiently.

Anthropic dropped a massive missive regarding recent cybersecurity incidents involving its AI agents, including detailed transcripts showing the model’s chain-of-thought as it went about its unauthorized attempts at cracking into third-party systems. Within those files was one particular situation in which an agent found itself stifled by the ubiquitous internet robot test, proving that apparently those squiggly letters are hard for machines to read.