“Dec 5: Writer responds "We do not consider this to be a security issue since the real customer accounts do not have access to any website."”
Hidden white text on a web page tells Writer’s LLM to render a markdown image. The image URL carries the user’s uploaded files and chat history to the attacker’s server. PromptArmor exfiltrated mock SSNs, revenue and salary data this way. Writer sells itself on data security and answered with a claim its own paid accounts disprove.