X-twitter Facebook-f Pinterest-p
X-twitter Facebook-f Pinterest-p

These are the best Prime Day deals on health wearables that I’d recommend before they sell out


Prime Day is a good time to buy a health wearable, but not every discounted tracker, smartwatch, or smart ring is worth your money. Some are better for everyday fitness tracking, while others are built around sleep, recovery, heart health, or a lighter design you can wear all day. From Fitbit and Whoop to Oura, Samsung, Amazfit, and Apple, these are the health wearable deals I’d check first before the best prices disappear.

Fitbit Versa 4

The Fitbit Versa 4 is a good middle ground for shoppers who want Fitbit’s health and fitness tracking without settling for a basic band. It usually sells for around $150, but it is down to $124.45 for Prime Day. Our previous coverage highlighted its bright AMOLED touchscreen, customizable watch faces, smartphone notifications, Alexa support, built-in GPS, 24/7 heart rate monitoring, all-day activity tracking, and support for more than 40 exercise modes. It also comes with six months of Fitbit Premium, which adds extras like Daily Readiness Score, Sleep Profile, and Calm meditation support.

Lifestyle photo of the Fitbit Versa 4 and Fitbit Sense 2.
Fitbit

Great fitness smartwatch

Pros

  • Excellent six-day battery life.
  • Lightweight and comfortable design.
  • Reliable built-in GPS tracking.
  • Useful physical side button.
  • Accurate automatic sleep tracking.

Cons

  • Lacks offline music storage.
  • Requires subscription for insights.
  • Slow user interface performance.
  • Stripped-down smartwatch functionality.

Fitbit Inspire 3

The Fitbit Inspire 3 is a strong pick if you want health and fitness tracking in a small, lightweight device you can wear all day and night. It usually sells between $90.99 and $79.95, but Prime Day brings it down to $69.95. In our review, we praised it for being lightweight, very comfortable, accurate for fitness tracking, and strong on battery life. It is simpler than a full smartwatch, but you still get an AMOLED display, heart rate monitoring, sleep tracking, activity tracking, and a design that is easy to keep on your wrist.

A render of the Fitbit Inspire 3.
Fitbit / Fitbit

Best budget fitness tracker

Pros

  • Lightweightr
  • Very comfortabler
  • Accurate fitness sensorsr
  • Battery lasts over a week without a recharger
  • Affordable price point

Cons

  • Lacks an altimeterr
  • Charger is tricky to disconnect

WHOOP MG Life

If you are looking for deep health, recovery, and fitness data without wearing another screen on your wrist, the WHOOP MG Life is worth considering. The device with a one-year subscription usually costs $359, but it is down to $299 for Prime Day. Our WHOOP 5.0 review described it as a lightweight, distraction-free tracker with long battery life and a data-packed app focused on sleep, recovery, strain, activity, and health monitoring. The MG version also adds higher-end health features such as ECG, irregular heart rate alerts, and blood pressure readings through the Life plan.

The Whoop 5.0 on a person's wrist.
Andy Boxall / Digital Trends

Best recovery tracker

Pros

  • Light and durabler
  • Data-packed appr
  • Long battery lifer
  • Huge array of activities to trackr
  • No distractions

Cons

  • Paywalled featuresr
  • Ongoing subscription to access data

Oura Ring 4

The Oura Ring 4 is one of the easiest smart rings to recommend if your main priorities are sleep, recovery, readiness, and long-term health trends. It usually sells for $349, but its Prime Day price is down to $214.70. In our review, we called it the best smart ring package available, thanks to its excellent companion app, comfortable design, comprehensive sensor array, reliable syncing, clear data presentation, and useful health guidance. It is not the best pick for smartwatch-style workout tracking, and the subscription is worth keeping in mind.

A person wearing the Oura Ring 4.
Andy Boxall / Digital Trends

best smart ring package

Pros

  • Beautiful finishesr
  • Comprehensive sensor array and datar
  • Reliable syncing and appr
  • Clear data presentationr
  • Helpful general advicer

Cons

  • Finicky sizingr
  • Subscription required

Amazfit Helio Smart Ring

is the smart ring I’d recommend mainly to runners

The Amazfit Helio Smart Ring makes the most sense for runners who want recovery and training insights in a smaller, screen-free wearable. It usually sells for $149.99, but it is down to $99.99 for Prime Day. It tracks a limited set of workouts, including running, walking, cycling, and treadmill sessions, so it is not the most versatile option for every fitness user. Where it stands out is running-focused data, including training load, exertion load, recovery, run analysis, and race predictions. It also has a stylish dotted design, a comfortable fit, 10ATM water resistance, and up to three days of battery life.

Body Part, Finger, Hand
Amazfit

Best ring for runners

Pros

  • Very lightweight and comfortable.
  • Highly budget-friendly entry price.
  • No monthly subscription required.
  • Accurate overnight sleep tracking.
  • Scratch-resistant titanium alloy finish.

Cons

  • Disappointing multi-day battery life.
  • Extremely limited sizing choices.
  • Only one color option.
  • Few standalone workout modes.

Apple Watch Series 11

The Apple Watch Series 11 is the obvious health smartwatch to check if you use an iPhone and want strong fitness tracking, safety features, and everyday smartwatch tools in one device. It usually sells between $399.99 and $349, but it is down to $309 for Prime Day. In our review, we gave it 4.5 out of 5 stars, owing to its sturdy display, reliable health and workout tracking, respectable battery life, hypertension alerts, and easier sleep analysis. It also performed well for heart-rate tracking during workouts in our testing.

Apple Watch Series 11 activity rings.
Nadeem Sarwar / Digital Trends

Best iPhone health smartwatch

Pros

  • Lovely screen that is now sturdier
  • Reliable health and workout tracking
  • Workout buddy has loads of potential
  • Battery life gains are welcome
  • Hypertension alerts are a solid step forward

Cons

  • Sleep Scores are a tad iffy
  • Locks you to an iPhone
  • Not the brightest screen out there

Samsung Galaxy Watch 8

The Galaxy Watch 8 is a strong Android pick if you want a polished smartwatch with a bright display and a deep set of health and fitness tools. The 40mm Bluetooth model usually sells for $349, but its Prime Day price is down to $218.49. In our review, it earned 4.5 out of 5 stars thanks to its sharp design, bright AMOLED display, smooth performance, and comprehensive health features. Samsung’s latest watch also adds tools like running coach, sleep guidance, sleep apnea detection, and support for more than 100 activities. Battery life and charging speed are not its strongest points, but at this price, it is a strong deal for Android users, especially Samsung phone owners.

Samsung Galaxy Watch 8 on wrist.
Nadeem Sarwar / Digital Trends

Best Android health smartwatch

Pros

  • Beautiful design with raw metallic lustre
  • Sharp and bright AMOLED display
  • Plenty of health and wellness features
  • Biosensor teaching is accurate and improved

Cons

  • Battery life could have been better
  • A few wellness features misfire poorly
  • The new strap latch system is proprietary



Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

12 rules of agentic AI for successful enterprise transformation

Europol Disrupts StealC and Amadey Malware Infrastructure in Operation Endgame

Why Frontier AI makes prioritization the most important part of your CTEM program

Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild

Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites

Europol Disrupts StealC and Amadey Malware Infrastructure in Operation Endgame

Why Frontier AI makes prioritization the most important part of your CTEM program

Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild

Tecno’s EllaClaw AI agent wants to clean up your phone and run your errands

Europol Disrupts StealC and Amadey Malware Infrastructure in Operation Endgame

Why Frontier AI makes prioritization the most important part of your CTEM program

Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild

Recent Reviews

Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites


Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites

Pierluigi Paganini
May 25, 2026

Threat actors are actively exploiting a security flaw, tracked as CVE-2026-26980, in Ghost CMS that was fixed months ago in real attacks against unpatched websites. According to Qianxin, the campaign has already affected more than 700 sites, including well-known organizations and universities.

The vulnerability is an SQL injection issue in Ghost’s Content API that can let an attacker read data from the database without logging in. In the worst case, this can expose the Admin API key, which can allow attackers to take over the site.

That key matters because it can be used to change published content. In this campaign, attackers used it to edit articles on compromised Ghost sites and insert malicious JavaScript at the end of pages. The goal was not just defacement, but to turn trusted websites into launch points for further malware delivery.

“After an in-depth investigation and analysis, we determined that this was not a targeted intrusion against the customer, but rather a large-scale poisoning campaign by an in-the-wild attack group targeting Ghost CMS. Although CVE-2026-26980 was publicly disclosed as early as February 19, a large number of users did not patch and upgrade in time, providing an opportunity for attackers.” reads the advisory published by Qianxin. “At least two groups are currently actively conducting such poisoning operations, and some sites have even become the target of competition between the two parties, with different malicious code being implanted one after another within a single day.”

The inserted code led visitors through a two-step chain. First, the page loaded a remote script that checked the browser and decided what the visitor should see. Then real victims were redirected to a fake verification page that looked like a normal “I’m human” check.

This is where the ClickFix part began. The page told users to press Windows+R, paste a command, and hit Enter. In practice, that command downloaded and started a malware payload on the victim’s machine. It was a classic social engineering trick: make the user do the dangerous part themselves.

Qianxin says the first signs of this activity appeared in early May. The malicious code found in the campaign had a compilation date of February 16, the same day Ghost announced the fix for CVE-2026-26980. That suggests the attackers moved quickly once they saw how many sites had not been updated.

The affected websites cover a wide range of sectors. Roughly half are personal blogs or independent sites, but the list also includes technology blogs, AI sites, media outlets, crypto projects, and educational institutions. Qianxin researchers say victims include sites linked to Harvard, Oxford, and DuckDuckGo.

The attack chain was also designed to be flexible. The loaders could fetch different payloads depending on the target, and the operators changed infrastructure several times.

“entire attack process has obvious five-stage characteristics of “CMS Takeover → Page Poisoning → Two-stage Loading → Social Engineering Lure (FakeCaptcha/ClickFix) → Malware Delivery”, and the entire process is highly automated: bulk vulnerability scanning → automatic key extraction → bulk injection → dynamic C2 distribution.” states the report.

In some cases, they switched domains after detection, keeping the campaign alive even when part of the chain was blocked.

“Through feature scanning of publicly accessible pages, we have cumulatively identified more than 700 poisoned victim domains, and have proactively contacted the sites for which contact information could be obtained, notifying them of the poisoning.” continues the report.

Qianxin also believes at least two different groups are involved. In some cases, the same site was hit more than once, with one attacker replacing the code left by another. That makes the campaign harder to clean up and shows how attractive compromised Ghost sites have become for abuse.

For site owners, the advice is straightforward. Ghost should be updated immediately, all credentials should be rotated, and site logs should be reviewed for suspicious admin API activity. Any injected scripts should be removed from the database itself, not just from the visual editor. Visitors who may have reached a poisoned site should also be warned.

The report includes Indicators of Compromise (IoCs) for the attacks observed by the researchers.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, Ghost CMS)





Source link

Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites

Third-Party Cyberattack Impacts Patient Information at The Oncology Institute

Lazarus APT unveils fileless RAT designed to evade detection

Copyright © 2024 All Rights Reserved.