A motherboard is useless without a cpu, so attacks tend to target that, hence why vendors keep releasing bios updates to mitigate this factor. Just look at the last 12 months of bios updates for both Intel & AMD current sockets & you'll see what I mean.