chatgpt added:

2012: Dual Elliptic Curve Deterministic Random Bit Generator (Dual_EC_DRBG) backdoor, likely introduced by NSA 

2016: Infineon RSA, tokens, smart cards, and TPMs, weak RSA keys. ROCA (Return of Coppersmith's Attack), factorize private keys

∞: IoT Devices, 'nough said