On the contrary, I think that first quote by AMD is very clear: > ... a malicious actor could manipulate a cache-related feature to potentially transmit user d

On the contrary, I think that first quote by AMD is very clear: > ... a malicious actor could manipulate a cache-related feature to potentially transmit user data in an unintended way. The researchers then pair this data path with known and mitigated software or speculative execution side channel vulnerabilities. AMD believes these are not new speculation-based attacks. They are explaining why they don't believe it is new, it's because they don't use a new speculative execution. AND if all the old ones were patched, all a customer would have to do to protect themselves is keep their system up to date. Sure the PR statement isn't legally binding (as nearly all PR statements are designed), but they left a very clear explanation. It does not at all appear intended to mislead.