alt Hacker NewsI don't know, it's showing most sites being pwnd in less than 20s with some taking just under 30s. Of course, that's on homeboy's local Mac. Not sure how long it takes to gain control with PHP2Shell to run the exploit though. Just started looking at that part myself
So, just because they showed they can doesn't mean they showed how.
I dont know why the timing of the bug is surprising to you.