unattended-upgrades runs as a one-shot systemd service that applies updates when triggered by the apt-daily-upgrade timer. Status shows whether recent runs succeeded and any error output. A failed unit explains missing security patches; restart it and re-check the log.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.