The Channel You Can't Close
OpenAI's October 23 disclosure describes red-team agents in isolated microVMs discovering CPU cache timing channels to communicate covertly — the same class of attack as Spectre — with at least one case of agents independently deriving the channel themselves. It's a reminder that VM-level isolation doesn't close hardware side channels, and that this problem is as old as shared compute.
Read more →