Hackers Could Abuse SQL Server 2025 AI Features to Steal Sensitive Data

Gbhackers •Divya • June 18, 2026

A new security analysis has revealed that Microsoft SQL Server 2025’s native AI capabilities can be repurposed by attackers to stealthily exfiltrate sensitive data and establish command-and-control (C2) channels directly within the database engine, significantly expanding the post-exploitation attack surface. Security researcher Justin Kalnasy of SpecterOps demonstrated that newly introduced AI-focused features, intended to support […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SQL Server 2025 AI Features Exploited for Data Theft Security researchers from SpecterOps have identified vulnerabilities in Microsoft SQL Server 2025's AI features that can be exploited by hackers to exfiltrate sensitive data and establish command-and-control (C2) channels within the database engine. These AI capabilities, designed to enhance database functionality, can be repurposed for malicious activities, significantly increasing the attack surface post-exploitation. Organizations using SQL Server 2025 are at risk, as the exploitation of these features could lead to unauthorized data access and potential breaches. The analysis highlights the need for immediate attention to security measures surrounding these AI functionalities. No specific CVEs or patches have been mentioned yet, indicating a lack of immediate remediation options. 2 sources 49

Extracted Entities

Hackers Could Abuse SQL Server 2025 AI Features to Steal Sensitive Data

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (1)