I would definitely do away with automatic updating entirely as "notify only" is still very safe in my opinion, as long as you have a reliable internet security suite. KB2545698 doesn't seem to be the culprit as far as I know because that was to do with typeface/font rendering only. The rest were bug fixes.
I'll look at the descriptions again when I'm back at work Tuesday and see if I can narrow it down to a single update. Also change over to Notify instead of Install, though there are times when I forget to check and don't want to miss Criuticle Updates.