---
id: 3822
title: "Otto Support - The Confused Deputy"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/otto-support-confused-deputy"
published_at: "2026-05-08 00:00"
tags: ["ai-security", "agentic-ai", "mcp", "prompt-injection", "ai-agents", "copilot", "mitigations", "confused-deputy"]
phying_url: "https://phying.com/item/3822"
lang: en
---

# Otto Support - The Confused Deputy

## Summary

Confused deputy attacks: agents reading attacker-controlled tickets or invites follow hidden instructions with their own privileges, as EchoLeak and ConfusedPilot show; layered mitigations covered.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2026-05-08 00:00
- **Original:** https://bishopfox.com/blog/otto-support-confused-deputy
- **Phying News:** https://phying.com/item/3822