Google’s reCAPTCHA system designed to separate bots from humans when signing up to web services has been defeated once more using Google’s speech-to-text service to bypass the challenge. Google released a new version of the mechanism and the team managed to defeat the newly-implemented protections once again. Google labeled the attack “Intended Behavior”” and did not inform the researchers about plans to update the mechanism. In April 2017
Source: security