Hackers Could Abuse SQL Server 2025 AI Features to Steal Sensitive Data

Security research demonstrates that Microsoft SQL Server 2025's new AI features (notably sp_invoke_external_rest_endpoint, CREATE EXTERNAL MODEL, and AI_GENERATE_EMBEDDINGS) can be repurposed by attackers to exfiltrate large volumes of data, coerce NTLM authentication for credential capture, and implement covert command-and-control channels via seemingly legitimate AI traffic; defenders should reassess privilege controls, audit external-model creation and usage, and restrict outbound network access from database servers.