SpecterOps walks through how SQL Server 2025 AI features can turn the database engine into an HTTPS sender, model-calling client, and even a C2 transport. The defensive value is concrete because it names places to watch, including external model changes, REST endpoint enablement, CLR assemblies, xp_cmdshell, and database egress that used to be easier to treat as suspicious.