I'd say a lot of legal expenses. Vista is an microsoft trademark and although they let a lot of domains pass, this one is targetting exploits which they are extremely defensive about.
At its current state there's no panic. No need to get rid of it. Unless you make a site with it targetting various windows vista exploits. Why would you want to do that anyway? This name isn't really good for anything.