Hiya!
WordPress’ automated updates for security updates (the third digit in the version number) is generally enabled by default, there’s no user interface for this built into WordPress itself.
You can either control how updates are handled using a plugin, through the setting file (wp-config.php), and in some cases your hosting provider may have setting for this in their control panel.
To change this via the config file, you can follow the documentation at https://projectdmc.org/documentation/article/configuring-automatic-background-updates/ (make sure to search in the file first to see if theyve been set up already, as setting up the same value twice will cause an error on your site until you remove the duplicate 🙂 )