The first thing the image does on first boot is an unattended update (very annoying), so whilst you haven't updated it; it has updated it's self in the background.

You can confirm this by running "ps | fax" and looking for the unattended process (or apt process), or by running "top" as it'll most likely be using the most resources.

Read More...