News bulletin feed items simulate external media coverage during a scenario, delivering headlines, article content, and optional video to show participants how an incident is playing out in public.
What news bulletin feed items are
News bulletins simulate external media coverage — they show participants how an incident is playing out in the public eye. They carry evolving context, rumours, and confirmed reporting that reflects the speed and unpredictability of real news cycles. Used well, they shift participants' attention beyond the technical response to questions of timing, communication, and reputational impact. A bulletin landing mid-scenario forces teams to ask: do we respond publicly, and if so, when?
Configuring a news bulletin
Add a news bulletin by selecting the News Bulletin item type from the Feed items panel. Once added, you'll see the default configuration fields:
Headline
The main headline shown to participants. Headlines should be concise and attention-grabbing, reflecting how media often frames breaking or early-stage information. They can be speculative, incomplete, or carefully worded — "Reports Emerge of Cyber Incident at OrchidCorp" or "Ransomware Group Claims Access to Customer Data" both set a different tone and urgency without necessarily confirming anything. A strong headline shapes perception immediately.
Sub-headline (optional)
A supporting line beneath the headline that adds context or nuance. Use it to introduce uncertainty, attribution, or scope without fully confirming facts. Examples like "Company has not yet commented on the alleged breach" or "Sources suggest phishing may be involved" help shape participant perception while keeping the picture incomplete — which is often exactly how early reporting works.
Category (optional)
The news category the bulletin appears under — for example, Technology, Business, Breaking News, or Cybersecurity. Categories help participants interpret who's watching and what the potential fallout might be. A story filed under "Business" implies different stakeholder anxiety than one under "Cybersecurity", and wider categories can signal broader reputational or market consequences.
Content
The body of the news article. Write it in realistic reporting language: reference unnamed sources or leaked claims, include quotes from analysts or industry experts, and be clear about what's confirmed versus what remains unclear. News content can deliver partial or indirect information that participants must interpret carefully — the goal isn't to hand them answers but to add pressure and context that inform their decisions.
Upload Video (optional)
A short video clip associated with the bulletin. Use it for a breaking news segment, an anchor summarizing early details, or on-screen commentary and speculation. Video adds a layer of realism and pressure even when it contains no new facts — seeing something reported on screen lands differently than reading it.
Delivery timing
The Deliver after X seconds field sets the delay before the bulletin appears once the scenario reaches the inject. Use timing strategically — a bulletin that drops immediately after a key decision lands very differently from one that arrives after a 90-second delay while a team deliberates. Stagger bulletins to escalate pressure, simulate leaks or media discovery, or show the consequences of inaction.