link to the actual key generation vuln we were refering to

howto/yubikey.md

@@ -502,7 +502,8 @@ are two reasons for this:
     considerations for storing encryption keys](#special-considerations-for-storing-encryption-key)
 
  2. entropy sources on security keys have been known to be flawed in
-    the past
+    the past, including on Yubikeys, see for example the [infineon
+    vulnerability](https://support.yubico.com/hc/en-us/articles/360021803580)
 
 ### Export to backup