There was an issue with the host of our RSS news feeds. They went down months ago, and no longer own their domain.
The new domain owners requires people to authenticate to access ANY resource(even if it isn't actually there) hence the pop-up.
Good news. Site wasn't compromised, and the issue was due to old code which should have been removed.
I removed it now and we should be good.