Is there any way to capture only the updates from "drush cex"?
Take a look at Config partial export module

It is able to export to a tarball only modified configuration files.

For available commands in drush:
drush cpex --help