Modern ships and ports increasingly resemble connected industrial systems. Terminal Operating Systems orchestrate containers, quay cranes receive digital work instructions, vessels depend on ECDIS, GNSS and AIS, and Maritime Single Windows connect ships with authorities. As IT, OT and navigation data converge, a cyber incident can move quickly from screens to the physical world: cranes can stop, gates can back up and crews can lose confidence in the vessel's true position.