OPEC+ signals supply risk as attacks threaten 1 million bpd