Abstract
The rapid expansion of cloud-native infrastructure and mobile computing has rendered traditional perimeter-based security obsolete, necessitating the development of resilient digital frameworks in alignment with United Nations Sustainable Development Goal 9 (Industry, Innovation, and Infrastructure). This review article investigates the convergence of two critical paradigms: Zero-Click Attacks, which exploit system components without user interaction, and Zero-Trust Architecture (ZTA), the necessary adaptive defence strategy. Adopting the PRISMA-based systematic review methodology, this study synthesises current literature to provide a critical evaluation of the evolution of zero-click vectors, focusing on critical vulnerabilities within Android system components and media processing libraries. The efficacy of current detection methodologies is evaluated, contrasting the limitations of static analysis with the promise of sandbox-based behavioural monitoring. Furthermore, the paper explores the transition from static ZTA policies to AI-driven enforcement, utilising the SmartTrust framework as a primary case study. This hybrid deep learning approach, integrating Convolutional Neural Networks, Long Short-Term Memory networks, and Reinforcement Learning, demonstrates how real-time, context-aware risk scoring can mitigate invisible threats. Finally, the review outlines open research challenges, specifically the scalability of behavioural analysis and the resilience of AI models against adversarial evasion, proposing a strategic roadmap for AI-native Zero-Trust in hyper-connected environments.