{"data":{"id":"75ebf498-9414-4c84-a285-1c3a0d5e6b29","title":"Viral AI actress' hotline face-scans every caller, watches their mood","summary":"The 'Talking Tilly' AI video-call service requires callers to submit a video selfie for automated age verification through a third-party provider before connecting, and continuously monitors callers' facial expressions and voice tone during calls to infer emotional state, with both features implemented using a legal basis of 'legitimate interests' rather than user consent. The service also records and transcribes all calls using US-based providers and Google's Gemini model, flags conversations for inappropriate content with an automated classifier that has produced false positives, and will shut down permanently on September 27 with all unused paid minutes forfeited.","solution":"N/A -- no mitigation discussed in source.","labels":["privacy","safety"],"sourceUrl":"https://www.bleepingcomputer.com/news/security/viral-ai-actress-hotline-face-scans-every-caller-watches-their-mood/","publishedAt":"2026-09-19T11:38:20.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["data_extraction"],"issueType":"news","affectedPackages":null,"affectedVendors":["Google"],"affectedVendorsRaw":["Google Gemini","Tavus","Didit","Xicoia Ltd"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-09-19T11:38:20.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","safety"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.82,"researchCategory":null,"atlasIds":null}}