It wasn't due to a rushed patch - the patch just gave the Project Zero researcher an idea for where he should look.
There's no real way of being sure if it is being exploited. I guess no exploits had been detected a couple of days ago, but it's not uncommon for the way it gets detected it for someone to find the exploit software somewhere. That's how Project Zero found these iOS issues for example[1].
