// Selected evidence-qualified indicators only; not the complete article IOC inventory.
// Source context is not a confirmed-malicious verdict; verify before operational use.
rule bulwark_https_bulwarkblack_com_signal_ringrtc_cve_2026_113380_call_termination_client_update
{
    meta:
        author = "Bulwark Black LLC"
        source = "https://bulwarkblack.com/signal-ringrtc-cve-2026-113380-call-termination-client-update/"
        description = "Auto-extracted indicators. Verify before use; not a behavioral detection rule."
        generated = "2026-10-30T01:22:23Z"
        tlp = "TLP:CLEAR"
        indicator_count = "1"
    strings:
        $s0 = ":new(None" ascii wide nocase  // Mutex Names
    condition:
        any of ($s*)
}