No, I think you didn't parse the story carefully enough. If you look, it's saying that MITM attacks are the kind of thing that COULD be used to break SSL, if you had bogus certificates. It does not say that there's any evidence of this actually happening on a large scale, and indeed one of the surprising things about the Snowden leaks so far is that there isn't much (any?) evidence of SSL sabotage, even though it obviously must be one of their highest priority targets. The MITM attacks that NSA/GCHQ have been doing have all been reported as being against sites that, at the time the attacks took place, were not doing SSL.
Regardless, if all you want to do is inject an exploit into a browser you don't need to beat SSL. It's not widespread enough so eventually someone will browse to a non-SSLd website (like slashdot) and get pwnd. At that point you can read all traffic before it gets encrypted.