I have been writing a small guide on how to enable notification of new security updates, for Ubuntu Server Edition.
It will use a dedicated (non-root) account to verify for updates and it will send a notification by e-mail to a chosen recipient. No installation of the updates is actually performed, you then need to login and install the new updates manually.
Based on: