The initial claims being put out was everything will be getting hacked 15 minutes after the patch drops. Turns out it took a lot longer than that.

If you are still running an old PHP version you are grossly incompetent and should take your server offline.

Did it? The article says they discovered the compromise on October 25th.

You had me at PHP