AMD's Critical RCE Exposed: How Public Disclosure Forced a Security Fix

AMD's AutoUpdate software contained a trivial yet critical Remote Code Execution vulnerability exploitable through man-in-the-middle attacks on unencrypted software downloads, compounded by the complete absence of executable code signing validation. The incident underscores a troubling disconnect in the vulnerability disclosure ecosystem: when vendors dismiss security issues as out-of-scope for bounty programs, researchers must resort to public disclosure to trigger meaningful action, undermining the entire responsible disclosure framework.