While not exactly recent, I think most people have Dual_EC_DRBG in mind these days when it comes to NIST and backdoors https://en.wikipedia.org/wiki/Dual_EC_DR

While not exactly recent, I think most people have Dual_EC_DRBG in mind these days when it comes to NIST and backdoors https://en.wikipedia.org/wiki/Dual_EC_DRBG https://en.wikipedia.org/wiki/Dual_EC_DRBG