The following line is the one that stands out for me:
The TAO catalog isn't current; it's from 2008. So the NSA has had six years to improve all of the tools in this catalog, and to add a bunch more.
I'm not going to add anymore to what Bruce has already stated; just wanted to share the insight with the good readers... In summary; whatever the NSA can do today, Cyber-Criminals will be doing it, tomorrow - be prepared.