The National Security Agency has been able to access computers that are not connected to the internet for at least five years.