LATIDIA · Ciberseguridad

Puertas rotas: reevaluación de las defensas de los bots web en la era de los agentes de LLM

arXiv: 2607.18659v2Tipo de anuncio: reemplazar Resumen: La rápida aparición de la automatización web en los rastreadores comerciales, los servicios de resolución y los agentes de navegador basados en LLM ha creado nuevos desafíos para las defensas que deben distinguir

La noticia

arXiv:2607.18659v2 Announce Type: replace Abstract: The rapid emergence of web automation across commercial crawlers, solver services, and LLM-based browser agents has created new challenges for defenses that must distinguish legitimate automated activity from scalable abuse. In response, modern bot defenses increasingly replace explicit challenges with risk-based decisions over browser, session, identity, and behavioral signals. This paper explores how current automation stacks can bypass these defenses end-to-end, evaluating seven commercial solver services and eight LLM-based browser agents against four widely deployed defenses. We find that solver services largely defeat challenge-based defenses with a 100% success rate, but collapse to an average 23% success rate on reCaptcha v3. Browser agents encounter a