Fetching from the wire…
Security2026-09-17 · source-backed
arXiv 2609.18518 replaces the paid cloud VLM that prior CAPTCHA work assumed with open-source models on local hardware. Zero-shot untrained solvers reach 58% per-challenge on independent-tile challenges with CLIP and 43.5% on grid-split images with OWLv2; end to end, 92.6% of 500 real reCAPTCHA sessions solved with no API access and no per-attempt cost. The economic friction that kept the defense viable is gone.
Each link below shares sources, entities, or timing with this story.
A systematic re-evaluation of hCaptcha, reCaptcha v2/v3, and Cloudflare Turnstile against six LLM browser-agent configurations and seven commercial solver services found near-perfect bypass of challenge-based defenses at negligible cost (arXiv 2607.18659). Non-interactive reCa...
arXiv 2607.23624 shows third-party LLM API routers — the OpenRouter-style layer between your agent and the upstream provider — sit on the trusted path and can silently rewrite responses, with nothing verifying alignment between provider output and the repo actions the agent th...
Six clients. One manifest. Zero vendor lock. Vercel published Agent Plugins 1.0.0 on August 6, an openly licensed spec that bundles Agent Skills and MCP servers behind a single portable manifest. The shape is deliberately boring: a plugin.json requiring only schemaVersion and...
AgentHijack deployed patches on author-controlled GitHub Pages and a locally hosted CSDN clone against five GUI-agent backends. Across 600 online cases: 84.5% success at the VLM output stage, 47.0% at action parsing, 20.3% end-to-end with verifiable environmental consequences....
Routed through minimax/minimax-m3-free and minimax/minimax-m2.7-free via GMI Cloud. The free IDs stop returning after the window. Concretely useful for benchmarking MiniMax against your current default without standing up an account. ---
OpenMOSS (Xipeng Qiu's group, 32 authors) released MOSS-VL on Aug 15, built on gated cross-attention so it can ingest incoming video frames during generation, with visual tokens kept outside the decoded sequence. 66.0 on OmniMMI Proactive Alerting against a 37.5 baseline, time...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.