First thing you should do is install wordfence then turn on automatic wp updates.
I added this to my wpconfig.php file
define( ‘WP_AUTO_UPDATE_CORE’, minor );
This will update the security minor updates straight away.
I don’t want this happening again