Newsletter Q4 2024

IBM Trusteer Pinpoint

Security

Remote access tool detection has from the outset been based on analysis of various behavioral inputs and statistical modeling, which indicate whether a remote access tool was used during the online session. Pinpoint includes a new remote access tool detection capability, which can identify when a remote access tool is being used during the online session.

Efficacy

  • To help customers to detect when Pinpoint snippet collections were blocked, we introduced a new blocking detection feature to Pinpoint. To enable the new feature, you must replace the existing snippet loaders in your online application.
  • To help customers identify malicious sessions, Pinpoint was updated to always include the names of the malware that were detected in the complete session when it responds to Trustboard requests.
  • To enhance device detection accuracy when collecting IPv6 addresses and to increase new device confidence, we extended IPv6 support to mirror IP class-C behavior in the runtime policy and insights.
  • To improve the calculation of the session risk at runtime, the session duration calculation that is exposed to the Pinpoint policy was improved.

Privacy

To improve user privacy, Pinpoint was enhanced with a privacy feature that checks Pinpoint API request fields for personally identifiable information (PII) and generates alerts if PII is included in the request. These events assist IBM® Trusteer® in identifying and mitigating exposed PII issues.

Performance, stability, and compliance

Pinpoint has completed an infrastructure update to use the latest version of NGINX and OpenResty solutions, which helps to streamline data flows on the Pinpoint clusters and to maximize the utilization of the servers thus reducing waste and improving the carbon footprint for IBM. This change also incorporated changes to the field order in the Pinpoint API response that we communicated to customers from the start of 2024.

IBM Trusteer Mobile SDK

Release of IBM Trusteer Mobile SDK 5.11.

In this release, we made the following enhancements to Mobile SDK:

Data collection

In this release, we added several new data collections:

  • One-time password indications
  • Application installation source
  • Device movement indication
  • Roaming indication

Mobile SDK supported platform and versions

  • Mobile SDK 5.7 and later are supported.

    From 2 March 2025, Mobile SDK 5.7 and all its minor versions will became unsupported.

    From 24 November 2025, Mobile SDK 5.8 and all its minor versions will became unsupported.

    For more information, see Support Lifecycle.

  • Supported platforms (in supported Mobile SDK versions)
    • iOS - supports iOS 15 and later. From this release, Mobile SDK will not compile your app for iOS 9 or earlier.
    • Android - supports Android 10 and later
  • Supported iOS development environments: Xcode 15.4 or later (aligned with Apple)
  • Supported Android development environments: Android Studio 3.1.1 or later

IBM Trustboard

To help customers identify malicious sessions, Pinpoint was updated to always include the names of the malware that were detected in the complete session when it responds to Trustboard requests. After the Pinpoint update, Trustboard now includes the names of the malware that were detected in the session.