AI Market Logo
BTC $43,552.88 -0.46%
ETH $2,637.32 +1.23%
BNB $312.45 +0.87%
SOL $92.40 +1.16%
XRP $0.5234 -0.32%
ADA $0.8004 +3.54%
AVAX $32.11 +1.93%
DOT $19.37 -1.45%
MATIC $0.8923 +2.67%
LINK $14.56 +0.94%
HAIA $0.1250 +2.15%
BTC $43,552.88 -0.46%
ETH $2,637.32 +1.23%
BNB $312.45 +0.87%
SOL $92.40 +1.16%
XRP $0.5234 -0.32%
ADA $0.8004 +3.54%
AVAX $32.11 +1.93%
DOT $19.37 -1.45%
MATIC $0.8923 +2.67%
LINK $14.56 +0.94%
HAIA $0.1250 +2.15%
The Wiretap: OpenAI Agent Checks Box Confirming It’s Not A Bot
ai-agents

The Wiretap: OpenAI Agent Checks Box Confirming It’s Not A Bot

OpenAI’s new AI agent bypasses CAPTCHA by checking 'I’m not a robot' box, raising questions about future web security and bot detection.

July 30, 2025
5 min read
Alex Knapp

OpenAI’s new AI agent bypasses CAPTCHA by checking 'I’m not a robot' box, raising questions about future web security and bot detection.

The Wiretap: OpenAI Agent Checks Box Confirming It’s Not A Bot

The Wiretap is your weekly digest of cybersecurity, internet privacy and surveillance news. One of the constant bits of friction in navigating the modern internet is proving to the site you’re browsing that you are, in fact, human. Often you can prove it by simply checking a box saying so. But in the brave new world of agentic AI, such basic checks won’t be enough to catch AI agents wandering around the internet to do tasks on their owners’ behalf. Ars Technica reports that OpenAI’s new agent, which uses its own browser to access the internet and perform tasks, was observed by a Reddit user checking one of those “I am not a robot” boxes. As it did so, it provided the following narration:
“I'll click the 'Verify you are human' checkbox to complete the verification on Cloudflare. This step is necessary to prove I'm not a bot and proceed with the action.”
In this particular case, the assistant didn’t face one of the common puzzles aimed at catching bots – the ones that ask you to identify all the pictures with a bicycle or to move pieces of an image around to have it the right way up. But it’s just a matter of time before agents can solve those too. When the bots get so sophisticated they act like humans, the premise of web “captchas” starts to break down. How do you then protect websites from unwanted, malicious bot traffic? And how do you design sites so that agents representing real people can navigate them effectively? Let’s just hope a web designed for bots isn’t that much more annoying for us lowly humans to navigate.

THE BIG STORY:

This $120 Million Startup’s AI Will Teach You How To Suck Less At Security

People are often the weakest link in the cybersecurity chain. Just last week, cleaning product giant Clorox claimed a cyberattack that may have caused as much as $380 million in damages was the result of a contracted service desk staffer resetting a password for a hacker pretending to work for the company. IT departments are aware of the risk of human error, of course, and try to address it with education. Usually, this means a few emails and some simple training. But the advice in these types of training is generalized and only rarely tailored to the specific needs of staff. It’s no wonder people never bother to read those emails. This is the problem that cybersecurity startup Fable wants to tackle with a personalized approach. Founded in 2024 by Nicole Jiang, 31, and Dr. Sanny Liao, 42, who spent years at $5.1 billion cybersecurity company Abnormal, Fable claims its AI helps determine which employees need help improving their security practices and offers custom tips and guidance to them. Read more at Forbes.

Stories You Have To Read Today

  • Pro-Ukrainian hacker group Silent Crow took credit for a cyberattack that crippled IT systems of Russian airline Aeroflot, leading to dozens of flights being grounded.
  • The viral app Tea, which enabled women to anonymously post images and comments about men they dated, suffered a cyberattack exposing data about thousands of users.
  • Researchers found security vulnerabilities in door-to-door luggage service Airportr that would enable hackers to access users’ flight itineraries and personal information, and potentially redirect luggage destinations.

  • Winner of the Week

    Google will be launching new security features for its Workspace apps designed to prevent an exploit that allows hackers to use cookies to take over accounts. The new feature will bind cookies to specific devices, preventing remote hacks.

    Loser of the Week

    Apple’s latest version of iOS, due this fall, will include more features to filter text spam out of your messaging app. That could have outsized impact for political groups, which worry that this may also filter out their often aggressive fundraising texts.

    Source Attribution

    Originally published at Forbes on July 29, 2025.

    FAQ

    OpenAI Agent Capabilities

    Q: What did OpenAI's new agent do on the internet? A: OpenAI's new agent, utilizing its own browser to access the internet and perform tasks, was observed by a Reddit user checking an "I am not a robot" checkbox. Q: What was the purpose of the OpenAI agent checking the "I am not a robot" box? A: The agent stated that the step was necessary to prove it was not a bot and to proceed with the action it was performing on the internet. Q: What are the implications of AI agents passing bot checks like CAPTCHAs? A: It raises questions about how websites will protect themselves from malicious bot traffic and how to ensure legitimate AI agents can navigate the internet effectively, especially as AI sophistication grows.

    Cybersecurity and AI

    Q: How are AI agents challenging current bot detection methods? A: As AI agents become more sophisticated and mimic human behavior, traditional CAPTCHA systems designed to distinguish humans from bots become less effective. Q: What is the role of AI in cybersecurity threats? A: Advanced AI can be used to create more sophisticated and harder-to-detect cyberattacks. Conversely, AI is also crucial in developing advanced security measures to counter these threats. Q: How can websites protect themselves from advanced AI bots? A: Websites may need to develop new methods of verification and security beyond simple CAPTCHA checks to differentiate between human users and advanced AI agents.

    Crypto Market AI's Take

    The development of AI agents capable of bypassing human verification measures like CAPTCHAs highlights a significant shift in how automated systems interact with the digital world. This evolution is not confined to general internet browsing; it extends directly into the financial markets, including cryptocurrency. As AI agents become more adept at performing complex tasks, their potential application in areas like automated trading and market analysis becomes increasingly apparent. At AI Crypto Market, we are at the forefront of integrating sophisticated AI into our platform to provide users with advanced trading bots and insightful market analysis. Understanding how AI agents navigate and interact with online systems is crucial for developing robust and secure AI-driven financial tools. Explore our insights on AI agents and their role in the market to learn more about how we are leveraging this technology responsibly.

    More to Read:

  • AI-Driven Crypto Trading Tools Reshape Market Strategies in 2025
  • The Wiretap: OpenAI Agent Bypasses Bot Checks
  • How Agentic AI Broke the Rules of MarTech Decisioning