#A15 #Unofficial #TD #GSI #TrebleDroid #AOSP

Build Date: 2025 04 15
March Security Patch

v2025.04.15
Latest

Changelog

Based on android-15.0.0_r26
Sync with latest sources of TrebleDroid
Sync with latest gapps based on tokay 15/BP1A.250405.007
Update GMS spoof fingerprint to pass Play Integrity

Known issues

No Internet connection on some devices
No working FOD/UDFPS

Maintainer: Ponces
Download

@TrebleGsis_PrivacySecure_Chat
@TrebleGsis_PrivacySecure_Channel

🚨 BPFDoor is back—with a stealthy new controller in play.

A fresh wave of BPFDoor attacks has hit telecom, finance & retail sectors in 🇰🇷🇲🇾🇭🇰🇲🇲🇪🇬 — using a stealth controller that opens reverse shells & moves laterally inside Linux networks.

🔗 Read → https://thehackernews.com/2025/04/new-bpfdoor-controller-enables-stealthy.html

⚠️ Why hack in… when you can just log in?

80% of breaches stem from SaaS identity misconfigurations.

One compromised account can trigger a chain: Entra ID takeover → GitHub exfiltration → Slack leaks

Wing Security gives full SaaS visibility—no agents, no blind spots.

✅ Identity & app mapping
✅ Real-time threat detection
✅ Full attack timeline

🔍 See how it works: https://thehackernews.com/2025/04/product-walkthrough-look-inside-wing.html

⚠️ Hackers are abusing AI tool Gamma to craft fake presentations that lead you to spoofed Microsoft SharePoint logins—and even fake CAPTCHA pages to dodge security scans.

🔗Details: https://thehackernews.com/2025/04/ai-powered-gamma-used-to-host-microsoft.html

🚨 Supply chain cyberattacks are exploding — and hitting where it hurts most: healthcare, retail, energy.

🦠 One breach = millions exposed.

The risk? Vendors are the backdoor. Hackers are walking right in.

Learn what’s driving this wave and how to stay ahead: https://thehackernews.com/2025/04/from-third-party-vendors-to-us-tariffs.html

RedMagic 10 Air Launches with Thin Build and Powerful Battery Life
https://www.gizchina.com/2025/04/16/redmagic-10-air-launches-with-thin-build-and-powerful-battery-life/

Acer Makes a Comeback with Super ZX Affordable Phones Series
https://www.gizchina.com/2025/04/16/acer-makes-a-comeback-with-super-zx-affordable-phones-series/

Mark Zuckerberg's failed negotiations with the FTC to end Meta's antitrust case
Article, Comments

Mitre-backed cyber vulnerability program to lose funding
Article, Comments

Anonymous Release 10TB Leaked Data Exposing Kremlin Assets, Russian Businesses
Article, Comments

European Union Vulnerability Database (EUVD)
Article, Comments

👇 Google blocked 5.1B bad ads and banned 39.2M advertiser accounts in 2024.

AI flagged scams, deepfakes, and fraud at scale—700K accounts suspended for impersonating public figures alone.

🔒 5.1B bad ads blocked
🔍 9.1B restricted
🚫 1.3B pages hit
👤 5M+ scam accounts suspended
🤖 AI flagged 700K deepfake scams

🔗 Full story: https://thehackernews.com/2025/04/google-blocked-51b-harmful-ads-and.html

Over 50% of vulnerabilities are exploited within 7 days of discovery.

Learn how to reduce MTTR and secure your apps with insights from ActiveState's 2025 State of Vulnerability Management & Remediation Report.

🛡️ Stay ahead of threats—download now! https://thn.news/vulnerability-management-2025

#DevSecOps #OpenSource

🎨 Google may introduce Material Design 3 Expressive at I/O this May

In a since edited post, a Google engineer mentioned there's going to be a talk at I/O about a new 'expressive' Material Design theme.

More details 👇

🔗 https://www.androidauthority.com/material-design-expressive-google-io-3545058/

UMIDIGI Will Reveal AI-Powered Innovations at Hong Kong Mobile Electronics Show
https://www.gizchina.com/2025/04/16/umidigi-will-reveal-ai-powered-innovations/

Chip stocks slide as Nvidia & AMD warn of China export-related costs
https://www.gizchina.com/2025/04/16/us-china-trade-tensions-impact-tech-stocks/

Even if you are a Windows user, LibreOffice still works on Windows. Give FOSS a test dip with Libre.

https://www.makeuseof.com/microsoft-office-2016-2019-end-of-life-support/

🔐🌍 UPDATE — CISA extends funding to prevent a shutdown of the CVE Program.

A new CVE Foundation is also launched to ensure global, independent oversight—just as ENISA rolls out the EU Vulnerability Database.

Read: https://thehackernews.com/2025/04/us-govt-funding-for-mitres-cve-ends.html#update-cisa-extends-cve-program-contract-amid-funding-crisis

As I revealed before, Android 16 adds an Advanced Protection Mode API that apps can query and enable their own security features if the user is enrolled in Advanced Protection.

@AssembleDebug just discovered Messages & Phone by Google will support it.

🔗 https://www.androidauthority.com/android-16-advanced-protection-mode-security-features-apk-teardown-3545203/

✨Galaxy AI is perhaps the most comprehensive suite of mobile AI features, but some features aren't available globally.

Social Composer, for example, is limited to China, but thank goodness for that: AI-generated social media posts sound horrible.

Some of the other China-exclusive Galaxy AI features seem genuinely useful, though, especially that Samsung Assistant and its Clipboard Assistant feature.

🔗 https://androidauthority.com/galaxy-ai-social-composer-3544596/

🚨Important clarification on that auto-reboot feature you may have recently read about 🚨

Google says the feature is NOT rolling out yet and that it's going to be OPTIONAL. I thought this was the case, but it's good to have confirmation.

More details👇

🔗 https://www.androidauthority.com/android-auto-reboot-optional-3545366/