Amazon said an attempt using the PHP flaws fixed on October 21 had hit one of its honeypots on October 17, before the public patches. That is the narrow version of Amazon PHP2Shell honeypot.
The person this changes first is anyone still running an unpatched PHP and hoping the exploit was theoretical. Security is who the reporting names, and that is not a claim about every rival in the same market.
I am not adding a result the report did not state. A pilot, a pledge, a filing, and a product you can buy are different events, and Amazon PHP2Shell honeypot is only as far as the first sentence.
If this touches something you use this week, act on the opening fact. If a later note from Security disagrees, keep that one.