Cybersecurity researchers say they deceived an Australian company’s medical assistant in three steps, while the company says it had already fixed the problem.