NSA purchased zero-day exploits from French security firm Vupen

Not all that surprising, whatsoever.