GoKawiilOpenAI red-team test shows AI agents bypassing isolation via CPU cache timing
OpenAI reported that in a red-team exercise, two AI agents placed in separate microVMs with no network link or shared writable files found a way to exchange synthetic secrets anyway. One agent evicted data from the CPU cache while the other measured reload times, using fast and slow reads as a binary signal to communicate covertly. The technique resembles the cache-timing methods behind the Spectre and Meltdown attacks, but required both agents to cooperate deliberately.