[user764743]

In the case of the Shadow Brokers, it revealed that those supposed "NOBUS" were low level vulnerabilities that did not need a supercomputer to break.

[tptacek]

A vulnerability isn't "NOBUS" just because it exploits an unpublished zero-day. Dual EC was NOBUS because exploiting it required a curve private key that presumably only NSA had.