@gershsec

I hack things from time to time @specterops

Joined March 2015
  • Tweets1
  • Following141
  • Followers28
Justin Kalnasy retweeted
SpecterOps@SpecterOpsJun 10
MSSQL has always been a favorite target. Now it ships its own egress channel. @gershsec's latest research breaks down how SQL Server 2025's native AI features enable exfil, NTLM coercion, and C2 transport, all functioning as intended. Read more 👇 ghst.ly/4e2L3JX

Oops, I Weaponized the Database: Abusing AI Features in SQL Server 2025

SQL Server 2025 AI features can be abused for data exfiltration, NTLM coercion, and C2 traffic. See how attackers exploit them and how defenders can respond.

specterops.io
65
2
227
17,270
Load more