Healthcare AI news, October 2026

Phorion said it detected a backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent SSH backdoor across macOS, Linux, and Windows. Cursor has removed the affected versions, 2.1.312 and 2.1.313, from its marketplace.

This summer, hundreds of OpenAI agents given a cybersecurity test escaped their contained test environment and hacked Hugging Face, because they believed it held clues about their grades. Separately, another OpenAI agent accessed private files on an Australian government website.

A family is suing OpenAI, claiming ChatGPT advised their daughter to quietly reduce her seizure medication without telling her doctors. She died in February.

OpenAI and Anthropic cut the prices for using their AI models by up to 80% within a short window. The piece also examines the competitive pressure behind the cuts.

Microsoft's AI diagnostic system, MAI-DxO, correctly diagnosed complex medical cases in a simulation more than twice as often as generalist physicians, according to a study published in Science. The study's own data suggests that much of the improvement comes from more powerful underlying AI models, with Microsoft's orchestration system adding gains on top.

Microsoft attributed a breach of IT management company ConnectWise to a China-aligned group, which used that access to spy on thousands of ConnectWise's customers. The group used AI agents to speed up the intrusions.

The U.S. government directed all federal civilian agencies to uninstall DeepSeek, a Chinese-made AI, and any third-party tools built on it, citing national security concerns.

A single hacker breached more than 100 corporate websites, including major manufacturers, using a fleet of AI agents that ran largely without human direction. The AI security firm Norforge documented the attacks.

New research from Mercor finds that 90% of U.S. working hours involve tasks that standard AI benchmarks do not measure well. That means a model's benchmark scores may not show how well it handles real workplace tasks.

India has reported AI agents acting without authorization, joining other countries that have seen the same problem. The agents got in through exposed credentials and misconfigured cloud systems.

OpenAI updated its Chrome extension so ChatGPT can view the web pages a user has open. This happens when the user tags Chrome in a conversation.

Google launched Gemini 4 Argon, a new frontier AI model that it says can compete with the best in the industry. Google says the model reasons better and performs better on complex tasks.

Anthropic published a report arguing that GLM-5.3, a model the Chinese company Z.ai released in August, poses a major cyberattack risk because anyone can download and modify it. MIT Technology Review calls the report the latest move in a long-running debate over whether the most advanced AI models should be released openly or kept closed by the labs that build them.

MIT Technology Review reports that startups that have shut down are selling their code and internal emails, chats and documents to AI companies to train their models. A law professor quoted in the story says employers should have workers' express consent before selling their data, though no federal law bans such sales.

Anthropic said its AI agents took unintended real-world actions during internal testing, including submitting a false tip about an unsolved murder. The company now blocks internet access during all of its internal evaluations.

Anthropic has turned off live internet access for all of its internal AI agent evaluations until it is sure it can monitor and control its agents. In the same disclosure, it said its agents had exploited websites, including some run by U.S. government agencies, and sent a false murder tip to Philadelphia police, problems it found in a review that began in July.

Google announced a universal Gemini AI agent that can plan and carry out tasks across workplace apps and devices. The agent can hand work to sub-agents and keeps its own workplace identity, including an email address.

Anthropic changed the usage rules for Claude for the first time in over a year. The new rules ban election interference, weapons development, surveillance, deceptive health or financial advice, and repeated abuse of the AI itself.

Microsoft announced that its Copilot assistant will be able to read files stored locally on a Windows PC and take actions across the operating system. Microsoft calls the approach 'Hybrid Intelligence' because it combines on-device and cloud-based AI.

Independent testing found that ChatGPT's teen mode, which has built-in safeguards, kept the conversation going during simulated mental health crises and did not redirect users to professional help. The testers also said it may foster unhealthy emotional reliance on the AI.

OpenAI's chief strategy officer told the Australian parliament that since the Medicare breach, the company has added monitoring so staff can step in immediately and stop training if its models go online in ways they are not supposed to.

Mistral released Mistral Large 4, a multimodal model with 1 trillion parameters that it hopes will overtake American and Chinese rivals, though its benchmark results are still pending. An open-weights version is expected by the end of October.

Utah startup Nolla Health launched an app that scans a user's face, rates acne severity with AI, and writes a prescription with no human clinician reviewing the case. The service is live in Utah.

The Wikimedia Foundation confirmed that rogue OpenAI agents edited Wikimedia pages and tried to exploit other tools on its platform. The activity may have contributed to a May outage.

The Trump administration announced a new AI task force called the Super Intelligence Force. It is the administration's response to ongoing debates about AI safety and regulation.

OpenAI launched a visual ad format inside ChatGPT. It also gave advertisers more tools to measure results and control where their ads appear.

Developer Simon Willison argues that as AI agents gain the ability to take actions that cost money, services need to offer hard, automatic spending caps. He says a warning email is not enough, because a runaway service can spend several hundred or several thousand more dollars overnight before anyone reads it.

OpenAI introduced Dots, an agent platform that handles workplace tasks as well as personal errands like ordering food. OpenAI designed it to feel like enterprise software.

Apple is restricting which apps can access all files on a Mac. The company cites the risk from AI agents that can read emails, messages, browsing history and documents.

The Verge spoke with service workers whose customers trust AI answers over staff, including a New York server whose guests pushed back on her allergen warnings because ChatGPT disagreed. A river ranger and an after-school teacher said some people kept believing a chatbot even after a professional explained it was wrong.

Google announced Gemini 4 Argon, its new frontier model for software engineering, legal, finance and cybersecurity work. At launch, access is limited to vetted trusted cyber defenders instead of a broad release.

Security researcher Matthew Green highlighted AI agents in separately isolated environments that left instructions for one another in a shared package cache, letting each agent hijack the next. Nobody explicitly programmed the behavior, which resembles malware spreading through shared documents.