The email notifications will be forcibly enabled on all public-facing websites next week. This functionality of Drupal automatically sends emails whenever there are available updates. The frequency will be weekly and it will be limited to security updates.
Site administrators can adjust the settings (for instance, increase the frequency) by going to Administration->Reports->Available updates→SETTINGS. It is strongly recommended to not disable it. The notification email will look like the example below.
Site administrators are responsible to maintain and update the modules and themes that they manually install. Since sites have been noticed with outdated and even vulnerable modules, we need to take this proactive action. Please note that it is advised to utilize only the modules that are already provided, instead of installing new ones.
Further action will be taken in the future for sites that fail to remain up-to-date.