Default settings on macOS enable Apple to routinely and silently push out updates to your Mac device. You can view or modify this preference in the Software Update preference pane:
Background updates include important updates to these built-in macOS security tools:
Gatekeeper: Validation of 3rd party applications
Malware Removal Tool (MRT): Anti-malware
XProtect: Signature-based antivirus
In the Automox console, you can set Disable OS Automatic Updates in the OS Patch Management settings for Groups.
With this setting, background updates will be managed in the Automox console, and appear as follows:
Gatekeeper Configuration Data