Hackers Can Leverage SQL Server 2025 AI Features to Exfiltrate Sensitive Data

SpecterOps demonstrates that SQL Server 2025's built-in AI capabilities (e.g., sp_invoke_external_rest_endpoint, CREATE EXTERNAL MODEL, AI_GENERATE_EMBEDDINGS) can be weaponized to exfiltrate large datasets over HTTPS, create covert C2 channels via model embeddings, coerce NTLM SMB authentication, load malicious .NET assemblies in-memory, and persist via triggers; PoC code is public and defenders are urged to restrict privileges, monitor AI-related features, and limit outbound connectivity.