Someone tried to exploit the critical PHP2Shell vulnerabilities four days before the vulnerabilities were published, according to Amazon.
Other security firms have also observed evidence of exploitation attempts in the wild for both vulnerabilities.
https://www.infosecurity-magazine.com/news/php2shell-exploitation-attempt/
Infosecurity MagazinePHP2Shell Exploitation Attempt Detected Four Days Before DisclosureThreat intelligence analysts now observe large-scale evidence of exploitation of the two critical PHP vulnerabilities