https://windowsreport.com/amd-intel-security-vulnerabilities...
Intel is in a lot more verticals than AMD is - networking, storage, etc - and all of those get their own CVE number. But that's a more nuanced approach than "big number bad" isn't it?
Specifically, Intel is finding a lot because they're doing an enterprise-wide initiative to lock down their IPs. Is AMD making the same effort, or are there more vulnerabilities in those GPU drivers or in the chipset drivers that they're not looking for? After all, a year ago they were at the stage where they were installing an out-of-date Apache instance along with your motherboard drivers... doesn't sound like security is priority #1 for them.
Again, low number sounds good. But if you're not looking, it's actually not good.
And researchers are not looking on AMD much either. AMD is less than 5% of the server market right now, you get the big headlines from finding vulnerabilities in Intel now, not AMD. Give it another 5 years and there will be more scrutiny on AMD's hardware/software.
Do they now? Why may that be? Not voluntarily i guess, with all the mess, others have found first, they fear losing ground, and shareholders blood thirst.
However, if that’s wrong I would love to read about it.
A bit later, AMD was uniquely not affected. But they were investigated, yes?
Seems like you like Intel more than AMD.
No problems with that, I'm the other way around :)
As to being lucky, I have no idea what their internal process is or what they considered. But luck seems like an odd way to talk about such things.
Cascade Lake and the latest Coffee Lake (and Comet Lake) steppings have hardware mitigations for all the previously known exploits (although there is a new batch) including some for which AMD still requires software mitigations themselves (Spectre V2).