Since WordPress 3.7 security and minor releases are automatically updated in a typical WordPress install.
For some WordPress hosted sites the need may arise to turn off the automatic update feature and manually handle these updates at a later time.
Here is how to disable automatic updates in WordPress:
You can easily disable the automatic update in WordPress by adding the following line of code in your wp-config.php file:
define( 'WP_AUTO_UPDATE_CORE', false );
After you save this file, automatic updates are disabled.
It is recommended that you manually update your WordPress site as soon as possible once you receive a notification. Now that you have disabled automatic updates in WordPress it is strongly advised to update any and all security updates as they become available to keep your site safe and stable at all times.